Cisco nxos local admin onboarding to cyberark

Hi all,

Currently in my organization local Cisco NXOS local admin are not onboarded to cyberark and the requirements is to onboard them.

The problem here is network admin use their ntid to login to switches by authenticating via radius and use the local switch admin account as break glass account.

Now if I vault this local admin account to cyberark they have to disable the radius which they do not want?

Please help me understand how can I vault the local accounts vaulted and managed. If we onboard them they will not be used as Break glass account, do I have to create another break glass account or what?

Please advice.

Appreciate your help in advance.

Thanks
Sri