Creating separate Administrator user groups with different permissions to two policy set rules

[mayibongwe.mpofu]

Good day

Suppose i have two device administration policy set rules (Rule-1 and Rule-2), is it possible to create two separate Administrator user groups, with group one having read-write access to rule-1 and no write or read access to rule-2. as well group two with read-write access to rule-2 but no write or read access to rule-1.

[Cristian Matei]

Hi,

   As far as I'm aware, this is not possible, as ISE RBAC works at the menu and data objects level; you can restrict/allow access to certain menu items or data entries. So it's not as granular as restricting access to a certain rule.

Regards,

Cristian Matei.