Please use below setting on Juniper Apstra to map Admin and Read user Roles.Please use below settings on ISE servers to create Apstra admin and Read profiles: Admin Policy:priv-lvl=15max_priv_lvl=15service=aos-execdefault attribute=permitaos-group=ap...

Please note that, the true client ip does show in logs when the gui user ends the session.