Maybe everyone else knows about this command - I'd forgotten about it and had to dig it out of an email thread this morning. I'm running through testing a bridge link setup where the root AP is the radius server for authenticating the non-root AP.
This command test aaa group allows you to do a sanity check on your root AP configuration so you don't spend all day troubleshooting the non-root AP