IS it Possible to split one External AD Group into two Identity by ACS5.7

[el.wang]

Is possible to to separate one Ext AD Group Identity  into  Two  Identity Group with different permission.

For example  some  users come from  AD Group 1   belong to  Identity Group  1  with privilege 15 

other users  come from the same AD Group 1 belong  to Identity  Group  1 with privilege 1 

[Ivan Gonzalez]

Hi,

That would be possible only if you another condition to differentiate one from the other, like usernames, device type they are trying to access, otherwise, just by filtering by AD group membership it will not be possible to assign different authorization profiles/shell profiles.

Note: Please mark it as answered if applicable  

[el.wang]

Thank you ,