ISE 2.2 Read-only access to the ISE GUI

[M.G.]

Hello,

Is it possible to create a read-only admin group in ISE  2.2 which provide read_only access to all the menus including policy set menus?

Regards,

Maryam

[Sheraz.Salim]

you can create a basic access and give it to the user.

go to Administration--->Admin Access--->Administrators----->Admin Users

here is a good link might found you intersting

https://community.cisco.com/t5/policy-and-access/read-only-web-access-to-ise-nodes/td-p/2327124

[M.G.]

Hi Sheraz,

Thank you for the response.

To my understanding the customisation for the admin groups is limited to "none" or "read and write" to the data.

In my case I want the admins to be able to see everything, including the policy sets, but they should not be able to change anything.

However, with creating a customised admin group I will be able to either give permission to access to a menu and some data, or not to give permission.

If I give permission to access a menu, the admins will be able to read and "change" the data for example the policies.

Is there a way to limit the admins not to change the policies?

The version of ISE I am working with is 2.2 patch 12.

Regards,

Maryam

[Sheraz.Salim]

the link i share earlier is the similar what was discussed  and what Nidi share it to you with more specific to cisco ise release notes. if you read it it explain the same process.

just curious why you make it as answered but not mine.

this is the link i shared earlier

https://community.cisco.com/t5/policy-and-access/read-only-web-access-to-ise-nodes/td-p/2327124

[Jason Kunst · Accepted solution]

Full read only capability is only available in 2.3 or higher

[Nidhi · Accepted solution]

ISE 2.3 onwards you can create read-only users . you can create menu access permissions .

Please refer the guide here- https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_0101.html

Thanks,

Nidhi