Customer has discovered a bug with Admin Access configuration on Cisco ISE 2.3. An AD credentials-authenticated (user/password) SuperAdmin can create external groups for RBAC, but the same user authenticated with certificate (CAC Card) can not. Window for selection of available external groups does not get populated when the SuperAdmin user is authenticated via certificate. Validated same condition on my lab systems. Is this by design, or is this behavior considered to be a bug? If by design, no documentation regarding this functionality is apparent. Thanks!
