ISE - Local site admin only has access to local users/devices?

[joe.bennett]

Hi All,

I'm trying to configure ISE so that a local site administrator can only edit devices and users in his location, and only view reports/authentications for users at that location. I've tried setting the data access permissions to only view his location in all locations, but he can still view users authenticating on all devices.

Does anyone have any ideas how we can filter the reports so that he only sees his site users?

Thanks,

Joe

[Saurav Lodh]

Cisco ISE 1.2 allows you to define role-based access control (RBAC) policies that allow or deny certain system-operation permissions to an administrator. Below is how you can assign roles, based on access to reports ,  to two different admins.

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_man_admin.html