Hello,
In one of our customer environments, ISE admin access is configured to use External AD groups. The super admin user who is in AD ISE super admin group is not able to add network devices. But according to the guide, super admin should be able to add or delete network devices and configure policy sets.
Thanks,
Aravind Ravikumar.