06-25-2022 07:18 AM
Is there a way in ise to use restapi or related to collect the ad groups calls in a policy set ?
I need all the ad groups to list called in a policy set. At the moment I need to take manual note
Solved! Go to Solution.
06-28-2022 06:38 AM
The AD groups that are queried in a Policy Set are set in the AD Join Point under the Groups tab. These are the groups used by the policy sets that are set to use that AD Join Point. If only one Join Point is used, then only the groups from that join point are searched. If multiple are used, then the groups from each join point are searched.
There is no API to show the groups searched for each specific authentication in a Policy Set.
06-27-2022 04:43 PM
Hi @MSJ1 ,
I don't quiet understand your question ... in my own words ... you have Policy Sets where at Authorization Policy the Condition that you use is:
<your AD>.ExternalGroups EQUALS <an specific AD Group>?
Am I correct?
06-28-2022 06:38 AM
The AD groups that are queried in a Policy Set are set in the AD Join Point under the Groups tab. These are the groups used by the policy sets that are set to use that AD Join Point. If only one Join Point is used, then only the groups from that join point are searched. If multiple are used, then the groups from each join point are searched.
There is no API to show the groups searched for each specific authentication in a Policy Set.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide