If you cut all the firewalls over to TACACS+, then the monitoring tool needs to be set so that it doesn't log in with a local account.
One of my compatriots did the cutover yesterday, I get to inherit the email chain that results in me fixing the monitoring tool today.
:glitch: