A ClearPass Policy Manager (CPPM) service includes these settings: Role Mapping Policy: Evaluate: Select first Rule 1 conditions: Authorization:AD:Groups EQUALS Managers Authentication:TEAP-Method-1-Status EQUALS Success Rule 1 role: manager Rule 2 conditions: Authentication:TEAP-Method-1-Status EQUALS Success Rule 2 role: domain-comp Default role: [Other]
Enforcement Policy:
Evaluate: Select first
Rule 1 conditions:
Tips Role EQUALS manager AND Tips Role EQUALS domain-comp Rule 1 profile list: domain-manager Rule 2 conditions: Tips Role EQUALS manager Rule 2 profile list: manager-only Rule 3 conditions: Tips Role EQUALS domain-comp
Rule 3 profile list: domain-only
Default profile: [Deny access]
A client is authenticated by the service. CPPM collects attributes indicating that the user is in the Contractors group, and the client passed both TEAP methods.
Which enforcement policy will be applied?