Hi Eric-
Unfortunately, there is no such option. There is the "My Device Portal" but that would only present the endpoints that were on-boarded with ISE for that particular user. In order to manage global endpoint groups, you will have to provision those users with the proper admin rights to the ISE system.
Thank you for rating helpful posts!