Prisma Access requires that you configure IP address-to-username mapping
to consistently enforce user-based policy for mobile users and users
at remote network locations. In addition, you need to configure
username to user-group mapping if
you want to enforce policy based on group membership.