11-15-2018 12:22 AM - edited 03-11-2019 01:52 AM
Hello,
I have a customer that intend to have a distributed deployments in several regions.
Each region will have a group of 2 PSNs.
They want to delegate admin per region.
So i want to understand down to which level can we delegate the admin right; Policy for each region? PSN for each? Data Logs for region? NAD for each region?
I have gone through the below document which gives details on how to give different admin right on the PAN not really my use case which more base a delegation based on location.
Best Regards,
Babacar
Solved! Go to Solution.
11-15-2018 02:37 AM
If you intend on having multiple PSN's spread over multiple regions, but the entire deployment managed by two PAN nodes, then I am pretty sure you cannot perform RBAC (Role Based Access Control) down to PSN level. I have only seen menu options that can be customised, and then the data access (read/write type of access) - but this applies to particular functions that span across all PSN's.
You're thinking of how Prime Infrastructure does its hierarchical access using Operations Centre, and then using Virtual-Domains etc. That concept does not apply to ISE. I would hazard a guess and say you'd need to deploy multiple PAN/MnT/PSN pairs all over the place if you want that sort of role based segregation.
11-15-2018 02:37 AM
If you intend on having multiple PSN's spread over multiple regions, but the entire deployment managed by two PAN nodes, then I am pretty sure you cannot perform RBAC (Role Based Access Control) down to PSN level. I have only seen menu options that can be customised, and then the data access (read/write type of access) - but this applies to particular functions that span across all PSN's.
You're thinking of how Prime Infrastructure does its hierarchical access using Operations Centre, and then using Virtual-Domains etc. That concept does not apply to ISE. I would hazard a guess and say you'd need to deploy multiple PAN/MnT/PSN pairs all over the place if you want that sort of role based segregation.
11-19-2018 12:23 AM
Many Thanks Arne.
Babacar
11-19-2018 12:23 AM
Many Thanks Arne.
Babacar
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide