Focus

Configure User-ID and User-Based Policies with Prisma Access

Table of Contents

Filter

Expand All | Collapse All

Prisma Access Docs

Administration
Version
- Prisma Access China
- 4.0 & Later
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred
Integrations
Incidents & Alerts
Release Notes
Version
- 5.2 Preferred and Innovation
- 5.1 Preferred and Innovation
- 5.0 Preferred and Innovation
- 4.2 Preferred
- 4.1 Preferred
- 4.0 Preferred
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred

Fields in Remote Networks Table

Configure User-ID in Panorama Managed Prisma Access

Configure User-ID and User-Based Policies with Prisma Access

Prisma Access requires that you configure IP address-to-username mapping to consistently enforce user-based policy for mobile users and users at remote network locations. In addition, you need to configure username to user-group mapping if you want to enforce policy based on group membership.

To select users and groups from a drop-down list when you create and configure policies in Panorama, you can also configure Panorama to obtain the list of user groups retrieved from the username-to-user group mapping.

The following sections provide an overview and the steps you perform to configure and implement User-ID and use the Cloud Identity Engine to get IP address-to-username and username-to-user group mapping in Prisma Access.

Configure User-ID in Panorama Managed Prisma Access

Configure User-ID for Remote Network Deployments

Get User and Group Information Using the Cloud Identity Engine

Populate User and Group Names in Security Policy Rules

Redistribute User-ID Information Between Prisma Access and On-Premises Firewalls