Cisco ISE ERS(APIs) on DATA Access Privileges on Cisco ISE ??

[Witthaya C]

Hi, 

For DATA Access Privileges on Cisco ISE

We have lot of User/Endpoint identity group(100+), currently I need to chose privileges(No access, Full access, Read Only) one by one for each of them, do it with manually quite take lot of time, also have multiple account as well, I would like to reduce the time and do it more easier than this.  

I have an idea to using Cisco ISE ERS (APIs) run some change on data access permission,  like set as a template and apply it all the rest of account.

Does its possible to do that by using Cisco ISE ERS (APIs), anyone got any guide how to do would be great.

Thank you so much.

Joe,

[thomas · Accepted solution]

Yes, ISE has APIs for User Identity Groups, Internal Users, Endpoint Identity Groups, and Endpoints. Everything is well documented @ https://cs.co/ise-api. There are also examples shown in ISE ERS API Examples .

You should register @ https://cs.co/ise-webinars for the 2 ISE Webinars I am doing in October related to ISE APIs and Automation:

• ISE REST APIs Introduction
• Practical ISE Automation with Ansible

ISE has 2 roles for API access (ERS Admin and ERS Operator) that you may assign to your ISE admins for updating and changing resources via API: