ISE - AD integration and Admin Service Account

[cpaquet]

What are the privileges that the Admin Account needs to have, after ISE has been integrated with AD?  In other words: what are the minimum settings that the Service account, used to log in AD and create the ISE-AD integration, needs to have to continue working (querying AD) after the initial integration, to authenticate 1X or CWA sessions, and query for group membership to work?

Thank you for your time.

[marce1000 · Accepted solution]

 - Check if this can give some initial info(s) :

              https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/ise_active_directory_integration/b_ISE_AD_integration_2x.html#reference_8DC463597A644A5C9CF5D582B77BB24F

 M.

[cpaquet]

Okay, I will go on AD and check on those.