Is it possible to set up only a certain AD user to log in to is webGUI

[CCC3]

I know that AD can be linked with ISE to log in the WEB GUI.

Then, is it possible to set up so that only certain users of AD can log in to the ISE web GUI?

[ammahend]

Yes, easiest would be to add those users to a new group and use that group for login authentication 

[CCC3]

I know how to do it
What I want is that AD does not change the settings
I only want to change the settings to proceed with ISE.

Is it impossible to do with a specific USER from a specific group?

[ammahend]

I don’t think it’s possible 

[ammahend]

Here is a similar post

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200891-Understanding-Admin-Access-and-RBAC-Poli.html

Try use rbac 

MHM