Is it possible to input user info from excel or manually in ISE

[interfacedy]

Hi ISE ver 2.7, Is it possible to input user info from Excel or manually? Thanks 

[Rob Ingram · Accepted solution]

Hi @interfacedy 

Yes you can import users from excel (csv format) or create manually.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ise_admin_guide_26/b_ise_admin_guide_26_chapter_01110.html#ID195

[interfacedy]

Hi Rob, thank you very much for your reply. Yes, the document can tell it.

The reason why i posted the question is I want to check where the AD database is located at the ISE after importing windows AD database into ISE via join point. After i created user account manually in ISE, i can see it in the ISE, but why I cannot see all user account info which was imported from windows AD? I think i already imported AD database into ISE successfully, but cannot see it.

[Greg Gibbs · Accepted solution]

ISE does not import anything from Active Directory. When joined to AD, ISE creates machine accounts in AD for each ISE node joined and uses those machine accounts to query the directory for attributes like Security Group membership. You can use those group memberships as matching conditions in your authorization policies.

See the ISE Secure Wired Access Prescriptive Deployment Guide for examples on adding AD groups and creating policies.

More details on the AD integration can also be found here - Active Directory Integration with Cisco ISE 2.x 

[interfacedy]

Thank you Greg! Its a very good document talking about the relation among these terms clearly.