How to configure TACACS+ for AAA on Switch and Firewall

Hi i'm want to connect TACACS+ with Switch and Firewall to limit user's privilege and store log. i have 3 groups of user that need to configure like below requirement:

1. troubleshooter: this group can use troubleshoot command like show ip interface, show ip route.etc...
2. operater: have all privilege of troubleshooter group with limit privilege of administrator group like can't change anything in SSH remote, Console remote, AAA or add user.etc...
3. administrator: can change everything in device.

so i want to ask:

1. how to configure TACACS+ to limit user's privilege on Switch and Sonicwall?
2. which mode of minimum switch and firewall that it can do this?

other question, i want to use TACACS+ with port authentication (802.1X) on switch, can i do this?

Thank for your kindness to give me your advice.