Managing local passwords on every switch does not scale. AAA with TACACS+ or RADIUS centralizes authentication, authorization, and accounting for all network devices.