08-02-2020 05:28 AM
Hi everyone,
I have a scenario that i have two differents access domains and one user can access both, but one with read only permissions and another with write permissions.I cant create users manually and select AD / ROLE because the idea is that the control is centralized in RADIUS / ISE.
In the example below, when i loggin in the Panorama i can switch between these Access Domains. Its possible to do the same thing using Radius / ISE? In my envorioment this configuration with vsa and radius works fine if i have only one access domain / one access role.
Is it possible to give one user two AD / Role using VSAs with RADIUS / ISE?
User config:
User access Domain View:
