After you have configured the Cloud Identity Engine, you can add, rename, or delete tenants and collect any custom attributes in your directory, as well as view a list of the default attribute formats. You can also view the comprehensive information that the Cloud Identity Engine collects.

To ensure consistent security policy enforcement, you can configure segments for granular data sharing across your network You can also configure context-based groups that update membership automatically based on criteria that you select.

If you use Device-ID and third-party devices to identify IoT devices on your network, you can use the Cloud Identity Engine to share device mappings with your Prisma Access Nodes.

If you use dynamic address groups for your tag-based security policy, you can use the Cloud Identity Engine to collect and redistribute mappings across your network to help ensure consistent policy enforcement.