What permission is shared by the Active Directory Join and Leave operations?
Both operations require permission to search Active Directory to verify whether a Cisco ISE machine account already exists. Creating the account and setting its attributes apply to joining, while removing the account applies to leaving.
Community Discussion