Through the normal ISE GUI, it is not easy to see how to combine the AND operator with the OR operator. However, on some occasions a compound condition needs to blend the two operators. Cisco ISE does have the capability to create a complex compound condition made up of simple conditions and any mixture of operators. The catch is that raw attributes cannot be used—only simple conditions can.
From the ISE GUI, do the following:
Step 1. Navigate to Policy > Policy Elements > Conditions > Authorization > Simple Conditions.
At this point, you should have at least two simple conditions listed: Employees and SmartDevice. Create some new simple conditions to be used in the complex compound condition.
Step 2. Click Add ...