https://community.cisco.com/t5/network-access-control/ise-automation/m-p/4142553#M562558 <P>We currently use ISE for our anyconnect users. Depending on the user configuration and due to an infosec requirement we need to create an individual AuthZ profile with its own DACL and a new rule in a policy that essentially identifies the user and applies the AuthZ specific to them&nbsp;</P><P>&nbsp;</P><P>I’d like to automate this process but I cannot find anything in the API documentation that suggests it is possible right now.</P><P>&nbsp;</P><P>Do people know of a way to create AuthZ, DACL and a AuthZ policy rule in an automated way?&nbsp;<BR /><BR /></P><P>Are people just not automating ISE configuration all that much?&nbsp;<BR /><BR /></P><P>Using ISE 2.4 currently</P> Thu, 27 Aug 2020 16:39:36 GMT Northy 2020-08-27T16:39:36Z https://community.cisco.com/t5/network-access-control/ise-automation/m-p/4142553#M562558 <P>We currently use ISE for our anyconnect users. Depending on the user configuration and due to an infosec requirement we need to create an individual AuthZ profile with its own DACL and a new rule in a policy that essentially identifies the user and applies the AuthZ specific to them&nbsp;</P><P>&nbsp;</P><P>I’d like to automate this process but I cannot find anything in the API documentation that suggests it is possible right now.</P><P>&nbsp;</P><P>Do people know of a way to create AuthZ, DACL and a AuthZ policy rule in an automated way?&nbsp;<BR /><BR /></P><P>Are people just not automating ISE configuration all that much?&nbsp;<BR /><BR /></P><P>Using ISE 2.4 currently</P> Thu, 27 Aug 2020 16:39:36 GMT https://community.cisco.com/t5/network-access-control/ise-automation/m-p/4142553#M562558 Northy 2020-08-27T16:39:36Z https://community.cisco.com/t5/network-access-control/ise-automation/m-p/4142568#M562560 <P>AFAIK you can utilize ISE APIs to create authz profiles, and dacls.&nbsp; I have not tested this as I primarily use the APIs to manipulate groups, and endpoints.&nbsp; However, If you go to your pan sdk via https://&lt;PAN IP&gt;:9060/ers/sdk# and go to API documentation you can see examples and this may also shed some additional light on other items you may be wishing to automate.&nbsp; HTH!</P> Thu, 27 Aug 2020 17:12:58 GMT https://community.cisco.com/t5/network-access-control/ise-automation/m-p/4142568#M562560 Mike.Cifelli 2020-08-27T17:12:58Z