A network engineer enables the ISE profiler service and wants ISE to automatically re-apply authorization whenever an endpoint's profile changes from a generic group to a more specific device type (for example, from 'Workstation' to 'Apple-Device'). The engineer navigates to the profiler configuration settings. Which global setting must be configured so that a profile change triggers a Change of Authorization for the affected endpoint?