ISE with AD nested groups and their depth

[engahmedsaied]

I see from other questions that ISE support AD nested groups 

can you share an official document contain that info also what about depth? How many levels it is supported?

[Greg Gibbs · Accepted solution]

As per the Active Directory Integration with Cisco ISE 2.x  document:

"Policy rule conditions may reference any of the following: a user’s or computer’s primary group, the groups of which a user or computer is a direct member, or indirect (nested) groups."

I'm not aware of any documented testing/validation of the limits of nested group depth, but this would likely be guided by the Microsoft-imposed limits and best-practices based on the software version.
Example... Active Directory Maximum Limits - Scalability