>
    Strata Copilot
    Create Application Groups
    Focus
    Download PDF
    Focus
    1. Home
    2. SaaS Security
    3. Get Started with Data Security
    4. Create Application Groups
    Download PDF
    SaaS Security

    Create Application Groups

    Table of Contents

    Create Application Groups

    Use Data Security teams to group cloud applications and restrict access to the assets, incidents, and reports for the cloud app.
    Where Can I Use This?What Do I Need?
    • Strata Cloud Manager
    • Data Security license
    Or any of the following licenses that include the Data Security license:
    • CASB-X
    • CASB-PA
    As a Super Admin, you can create an application group to group cloud apps and restrict admin access to cloud app, incidents, and assets on Data Security. Instead of granting access to all apps, you can assign an admin to an application group and grant access to just a few apps. With the Super Admin role, you can create application groups or edit administrator accounts, and assign administrators to application groups.
    1. Log in to Strata Cloud Manager.
    2. Select ConfigurationSaaS SecuritySettingsApplication Groups and Add.
    3. Enter the Name of the application group.
    4. Select the apps the application group will have access to.
    5. Select the people whom you want to add to your application group.
    6. Save to create your new application group.
      • All users are part of the All Apps group by default.
      • Only a Super Admin can move other administrators to an application group.
      • You can't remove or delete a user from an application group. They can only be added or moved from one group to the other.
      • Multiple people can be added to a single application group.
      • A person (from the people group) can be included only in one application group at any given time.
      • A person (from the people group) must be a part of an application group. That is, a person can't be without any application group.
      • You can't rename the All Apps group.
      • You can't delete an application group until all users are moved from that group.
      • You can't delete cloud apps or people from the All Apps group.
    7. Create a custom application group.
      1. Select ConfigurationSaaS SecuritySettingsApplication Groups and Add.
      2. Enter the Name of the application group.
      3. Select the applications the application group will have access to.
      4. Select the people whom you want to add to your application group.
      5. Save to create your new application group.
      • All users are part of the All Apps group by default.
      • Only a Super Admin can move other administrators to an application group.
      • You can't remove or delete a user from an application group. They can only be added or moved from one group to the other.
      • Multiple people can be added to a single application group.
      • A person (from the people group) can be included only in one application group at any given time.
      • A person (from the people group) must be a part of an application group. That is, a person can't be without any application group.
      • You can't rename the All Apps group.
      • You can't delete an application group until all users are moved from that group.
      • You can't delete cloud apps or people from the All Apps group.

    © 2026 Palo Alto Networks, Inc. All rights reserved.