Which feature of ISE provides role-based access control and command level authorization with logging for auditing?

Platform Exchange Grid (pxGrid) is a context-sharing framework that allows ISE to publish session data to third-party security products, not a device administration or command authorization feature.

TACACS+ Device Administration in ISE separates authentication, authorization, and accounting (AAA) for device management, allowing administrators to define granular command-level authorization policies per role. It logs every command executed on network devices, providing a full audit trail. This is distinct from RADIUS-based network access and is specifically designed for privileged device access control.

Context-aware access uses identity and contextual attributes (posture, location, device type) to enforce network access policies, but does not provide command-level authorization or device administration auditing.

Centralized policy management is a broad ISE capability describing its unified policy engine, not a specific feature tied to command-level authorization and TACACS+-based device administration logging.