With the RBAC in place, the CLI tab-completion should take the advantage (where possible and reasonable) and suggest only the commands, arguments and argument values that are available and allowed to be executed by the current user.
Since performing access control checks may be time consuming (especially in the domain mode) this feature should be optional and exposed through CLI configuration.