An engineer needs read/write access to rename access points and add them to the correct AP groups on a wireless controller. Using cisco ISE TACACS, which custom attributes is the minimum required?

This configuration provides `read-write` access for both `ap-group` and `ap-name` attributes, which is the minimum required to rename APs and add them to AP groups on a wireless controller via TACACS+ through Cisco ISE.

This choice incorrectly sets `ap-group=read-only`, which would prevent the engineer from adding APs to groups, as required by the question.

This choice incorrectly sets `ap-name=read-only`, which would prevent the engineer from renaming access points, as required by the question.

The `role1=WRELESS` attribute contains a typo ("WRELESS" instead of "WLAN") and is not a valid or standard attribute for this purpose in Cisco WLCs with ISE.