Objects > Dynamic User Groups
To create a dynamic user group, select
Dynamic User Groups
Adda new dynamic user group and then configure the following settings:
Dynamic User Group Settings
Namethat describes the dynamic user group (up to 63 characters). This name appears in the source user list when defining Security policy rules. The name must be unique and use only alphanumeric characters, spaces, hyphens, and underscores.
Descriptionfor the object (up to 1,023 characters).
Select this option if you want the match criteria of the dynamic user group to be available to every device group on Panorama.
Panorama does not share the members of the group with device groups.
Device Groupselected in the
Select this option to prevent administrators from overriding the settings of this dynamic user group in device groups that inherit the object. This selection is cleared by default, which means administrators can override the settings for any device group that inherits the object.
Add Match Criteriato define the members in the dynamic user group using the
ORoperators to include multiple tags.
Add Match Criteria, only existing tags display. You can select an existing tag or create new tags.
Optional) Select or enter the static object tags that you want to apply to the dynamic user group object. This tags the dynamic user group object itself, not the members in the group. The tags you select allow you to group related items and are not related to the match criteria. For information on tags, see Objects > Tags.
After you add a dynamic user group, you can view the following information for the group:
Dynamic User Groups Column
Identifies whether the match criteria for the dynamic user group is available to every device group on Panorama (
Shared) or to the selected device group.
moreto see the list of users in the dynamic user group.
Recommended For You
Recommended videos not found.