You configured your system authentication order using the set authentication-order tacplus radius password command.

A rejection by TACACS+ will prevent a login and bypass the other two authentication methods.

The password authentication will only be used if the TACACS+ and RADIUS servers fail to respond.

All authentication methods are used with the most restrictive permission set used.

The password authentication method is evaluated if the TACACS+ and RADIUS servers respond with a reject message.