ISE Admin Read Only Access

[smcipnetz]

Hello,

is it possible, to create some admins with read-only access on the gui in ISE Version 1.2.0.899 Patch 13?

Best regards

[Kanwaljeet Singh · Accepted solution]

Hi,

Below is from user guide.

"Read-only functionality is unavailable for any administrative access in Cisco ISE. Regardless of the level of access, any administrator account can modify or delete objects

for which it has permission, on any page that the administrator can access”.

http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_0110.html

I have tested in the lab as well and granular access like read only is not available. Whatever available at the moment are the pre-defined RBAC rules.

Regards

Kanwal

Note: Please mark answers if they are helpful.

[smcipnetz]

Hi Kanwal,

thanks for your reply!

Best regards

[krishnangangster]

Hi,

You can try creating the Admin user and adding him to the Helpdesk Admin Group.

However he will have access only to the Operations tab with Read-Only Access.

He will not be shown any other tabs as well.