Ise tacacs + duo

Hi,

is there any way that Cisco ISE could authorize commands on Cisco IOS devices like shutdown/reboot or enable with DUO push?

Best regards,
Zach