admin aaa on
admin aaa method TAC_X
admin aaa server es01 "10.1.150.50" 49 "shared_secret"

The default "array" user must not be disable.

user "array"       "XXXXXXXXX$1$h5cQXa3M$kvAwjHXJiO5SPdGc5tUFv1"

If the "array" user is disabled with "no user array" only WebUI is accessible but not the CLI.

The password for "array" can be set to any strong password.