ISE authorization policy matching internal user identity group.

[StuartR]

Hi,

I'm trying to find out how to match a internal user identity group in an authorization policy in ISE 1.4. I've tried various options with no luck.

Thanks

Stuart

[Seb Rupik]

Hi Stuart,

How far have you got?

When creating a policy you can define a condition using 'InternalUser:IdentityGroup equals <internal_group_name>' . (see attached image)

You will have to manaualy type the <internal_group_name>. This will be defined under:

Administration -> Identity Management -> Groups

cheers,

Seb.

[jan.nielsen]

Same as any version of ISE really, you just select the group you wan't to match, by pressing the + sign right next to the "if" in the rule.