Timed Access to the GUI

[martucci]

Hello, customer would like to have a timed access to the GUI from the admin.The administrator will be able to make changes only out of business hours, while reporting would be available always.

I have not seen a way to assign a time specific access and do not think it is there, but wanted to double check

Thanks

[Cristian Matei]

Hi,

  ISE itself does not have the option. Are you trying to deploy RBAC access, or just allow GUI admin access only outside of business hours? You could integrate ISE with AD for example, for GUI admin access, and configure those users in Windows GPO to restrict "Logon Hours" to whatever you want. Here's the integration example, you just need to make the additional changes at the user/group level in AD, for logon hours:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/116503-configure-product-00.html

Regards,

Cristian Matei.