What is the condition that a Cisco ISE authorization policy cannot match?

Company contact can be used as an attribute in an authorization policy, especially if integrated with an external identity source that provides this information.

Cisco ISE authorization policies leverage a wide range of attributes (such as device type, time of day, user group, posture status, etc.) to define conditions. While you can create highly customized policies using combinations of these attributes, 'custom' itself is not a predefined, selectable condition category or attribute that an authorization policy matches against.

Time (e.g., time of day, day of week) is a common and supported condition for authorization policies in Cisco ISE to restrict access based on schedule.

Device type (e.g., IP phone, printer, laptop) is a fundamental profiling attribute used extensively in Cisco ISE authorization policies.

Posture (compliance status of an endpoint) is a critical condition in Cisco ISE authorization policies, determining access based on whether a device meets security requirements.