cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

98
Views
5
Helpful
2
Replies
Cisco Employee

API with flexible right ISE 2.4 Patch 9 - Only Read or Full admin - Need more granular admin rights

A customer is asking for granular support on API for allowing to do not only read only or full admin but more granularity per command ? customer is using version 2.4 patch 9

 

1 ACCEPTED SOLUTION

Accepted Solutions
VIP Advocate

Re: API with flexible right ISE 2.4 Patch 9 - Only Read or Full admin - Need more granular admin rights

Please submit a feature request, granular ERS/API access does not exist today other than the RW or RO roles Mike covered.

External
http://cs.co/ise-feedback

Internal
http://cs.co/ise-pm

View solution in original post

2 REPLIES 2
Rising star

Re: API with flexible right ISE 2.4 Patch 9 - Only Read or Full admin - Need more granular admin rights

Are you able to provide a more detailed example for their expectations? If I am understanding correctly it sounds like the customer wants to limit the ability for certain users to run different types of crud operations to ISE. What are you using to run them through? When you enable ers APIs in ISE it allows read/write on PAN and read only on other nodes (PSNs). My suggestion would be to create separate users. One with ers admin for read/write folks. One with ers operator for read only. Good luck & HTH!
VIP Advocate

Re: API with flexible right ISE 2.4 Patch 9 - Only Read or Full admin - Need more granular admin rights

Please submit a feature request, granular ERS/API access does not exist today other than the RW or RO roles Mike covered.

External
http://cs.co/ise-feedback

Internal
http://cs.co/ise-pm

View solution in original post