Custom Profile for Firepower Chassis in Cisco ISE

[NeWGuy1109]

My firepower chassis is integrated with Cisco ISE via TACACS.. for monitoring tools i have assigned "read-only" and "operations" user profile.. i have a use case where monitoring tool wants to run connect module 1 in firepower chassis .. the problem here is that predefined profiles apart from admin role in firepower chassis doesn't allow connect module to run .. is it possible to create a custom role/profile for AAA users in firepower ? 

i am aware of "admin", "aaa", "operations" & "read-only" roles but i need a custom role.

[balaji.bandi]

yes you can create admin use and give only command required for the profile user in ISE.

example guide :

https://ciscocustomer.lookbookhq.com/iseguidedjourney/ISE-device-admin-policy-sets?utm_campaign=ISE&utm_content=Guide&utm_source=Cisco.com-Open&utm_medium=ISE-Page-Device-Admin&pfhide=true

[NeWGuy1109]

does it apply to firepower as well ? i have used command sets for my Nexus and  ASA but the command sets  never applied to firepower chassis..it always seemed to take the attribute value which is matched from roles create in chassis

[balaji.bandi]

never tested, worth trying as that is your requirement.