CSCvr07394 - ISE Enhancement request
It's been years (2019) since the Enhancement request for RBAC permissions for ERS access has been requested.
Currently, ERSAdmin has full admin permissions. Even if you create a separate policy and attempt to limit permissions for the ERS group, the service itself requires ERS Admin group membership.
Please add this critical enhancement.