It allows ClearPass to transmit messages to the Network Attached Device/Network Attached Server (NAD/NAS) to modify a user’s session status

It allows clients to issue a privilege escalation request to ClearPass using RADIUS to switch to TACACS+

It is a mechanism that enables ClearPass to assigned a User-Based Tunnel (UBT) between a switch and controller for Dynamic Segmentation

It forces the client to re-authenticate upon roaming to an access point controlled by a foreign mobility controller.