GlobalProtect Portals Agent User/User Group Tab

Select NetworkGlobalProtectPortals<GlobalProtect-portal-config>Agent<agent-config>User/User Group to specify the operating systems and users or user groups to which this agent configuration applies. If this agent configuration cannot accommodate all combinations of operating systems and users capabilities, consider adding another agent configuration. If you have multiple agent configurations that are differentiated by operating systems and users or user groups, the most specific configurations should be at the top of the table in Agent and the most general (such as any OS and a broad group membership) at the bottom. You can move an agent configuration up or down as needed.
For groups, the only supported type of authentication service is LDAP.
GlobalProtect Portal Client User/User Group Configuration Settings
A user or group member can have multiple devices whose operating systems differ from each other (for example, a user with one endpoint running Windows OS and another endpoint running Mac OS). The portal can provide configurations that are specific to the OS on each endpoint. For the current agent configuration, you can Add one or more client operating systems to specify which clients receive the configuration. A portal automatically learns the OS of the client device and incorporates details for that OS in the client configuration. You can select Any OS or a specific OS (Android, Chrome, iOS, Linux, Mac, Windows, or WindowsUWP); you can also select more than one OS. The information in User/User Groups describes how you can further differentiate by selection of users, user groups, and choice of any, pre-logon or select.
User/User Group
You can Add individual users or user groups to which the current agent configuration applies.
You must configure group mapping (DeviceUser IdentificationGroup Mapping Settings) before you can select the groups.
In addition to users and groups, you can use the drop-down to specify when these settings apply to the users or groups:
  • any—The agent configuration applies to all users (no need to Add users or user groups).
  • select—The agent configuration applies only to users and user groups you Add to this list.
  • pre-logon—The agent configuration applies only to the users and user groups you Add that also are configured for pre-logon or pre-logon then on-demand. The pre-logon option applies to pre-logon users before they log in to their system. To use the pre-logon option, you must also enable a pre-logon (or pre-logon then on-demand) Connect Method in the App tab for this agent configuration. If you specify a pre-logon Connect Method but specify any users or groups, the configuration applies to pre-logon users before and after they log in.

Related Documentation