Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 261

A network administrator must restrict sponsor account privileges for managing guest accounts on Cisco ISE for a new account that is being created. Sponsor groups currently exist for each business unit. The new sponsor that is being added must be restricted to only managing guest accounts created by sponsors from the same sponsor group. In which group must the new sponsor account be configured?

Answer options

• A. GROUP_ACCOUNTS
• B. OWN_ACCOUNTS
• C. ALL_ ACCOUNTS
• D. ALL_EMPLOYEES

Correct answer: A

Explanation

The correct answer is A, GROUP_ACCOUNTS, as it specifically allows the sponsor to manage only guest accounts created by members of their own group. The other options do not provide the necessary restrictions: B (OWN_ACCOUNTS) is too broad, C (ALL_ACCOUNTS) allows access to all guest accounts, and D (ALL_EMPLOYEES) pertains to employee accounts rather than guest management.