I'm not sure about single device mode (on-box PRSM) but if you use the separate PRSM (multiple device mode or "off-box") and have integrated with a directory realm, you can add remote users belonging to that realm to PRSM.
You cannot at this time use TACACS or RADIUS as a directory realm - the supported types are LDAP, Active Directory and SSO.