Admin group for ISE that can only add a mac address to the Temp-Whitelist.

[Kevin S Hatch]

Looking for some sort of guide in how to set up a new admin account (or maybe modify the Helpdesk Admin),

So that when they get a call from a corporate user that is being blocked.  They can add the device to the Temp-Whitelist and then have the desktop tech check the device.

[Sathiyanarayanan Ravindran · Accepted solution]

Hi Kevin,

please check whether the admin group role Identity Admin helps for your requirement or not.

Refer : ISE Management User Guide

[Jason Kunst]

And if it doesn’t you can tweak what the user can access through the admin settings