Is there any way to modify in bulk mode the exisiting users(e-mail in my case) in a policy on CISCO ISE?

[victormanuelsolis]

Hello Team,

Is there any way to modify in bulk mode the existing users(e-mail in my case) in a policy on CISCO ISE? Im going to replace the current email with other new. I have 600 users on each policy. Thank you!

[Greg Gibbs]

I'm not sure I understand what you mean by 'existing users... in a policy'.

If you're referring to updating the email address configured for internal Network Access Users in ISE, you can update user attributes using either the ERS API or by exporting all users via CSV, updating the values, and re-importing the CSV file with the "Create new user(s) and update existing user(s) with new data." option selected.

If you're referring to updating local Admin User accounts in ISE, there is currently no method for performing bulk updates. Each admin user would need to be updated individually.

If you're rerferring to some other type of user account, please be more specific in your description.

[victormanuelsolis]

Thank you, I know I can export/import the users from Identities section, but I need to update the users on the Policy section, I mean, I have users under Policy->Policy Sets->PolicyXXXXX These users match with the users on identitites section, if something its different on each other, the access is denied.

[Greg Gibbs · Accepted solution]

There is no way to bulk update Policy Set or AuthC/AuthZ Policy configuration in currently shipping versions of ISE.

The next version of ISE 3.1 introduces OpenAPI support for Policy Sets and AuthC/AuthZ Policies, but even that would likely require some crafty scripting to update the unique policy model you have.

[victormanuelsolis]

Thanks Greg!