User Groups

On this page, you can manage user groups and assign roles in your Check Point Portal account. Each group has a unique name, and users can belong to multiple groups. You can add users manually in the Check Point Portal or import groups from an Identity Provider (IdP).

Managing User Groups

To add a new User Group

Note - All fields marked with an asterisk (*) are mandatory.

Go to > User Groups.
In the toolbar, click New.

A wizard window opens.

In the Group Details step of the wizard, enter this information:

Name
Description

For Group Source, select one of these options:

Manually - Select this option to add only users who are defined manually in the Check Point Portal.
IdP directory Sync - Select an IdP and a group to import. The Check Point Portal automatically synchronizes group membership information from the IdP. This option is available only for an IdP that is integrated with the Check Point Portal and has Directory Sync A solution that holds static Directory information regarding users, groups, devices, and memberships. . enabled. See SSO Authentication Setup with Identity Provider.
IdP group ID - Enter the ID of a group as it appears in your IdP. This option is available only for an IdP that is integrated with the Check Point Portal. See SSO Authentication Setup with Identity Provider.

Note - In an IdP directory sync configuration, Check Point Portal synchronizes group membership with the IdP on a regular basis. In an IdP group ID configuration, Check Point Portal queries the IdP for each login event.

Click Next.

Optional - In the Members step of the wizard, add more members to the group. These additional members must be defined manually in the Check Point Portal.
1. Click Add member.
  
  A new window opens.
2. Select users to add to the group.
3. Click Next.
In the Access and Roles step of the wizard, assign roles to the user group:
1. Assign Global Roles to the group. See Global Roles.
2. Assign Specific Service Roles to the group. See Users.
Click Add.

The new User Group appears in the table.

Note - You can create a User Group without members and add the members later.

To edit an existing User Group

Note - If in the Accounts tab you configured a user group to be associated with a child account automatically, you can edit this user group only from the parent account.

Important - Immediately after you remove a user from a user group, the user loses permissions that were based on the group.

Go to > User Groups.
Select the user group that you want to edit.
Click Edit.

A new window opens.
Make changes to the user group.
Click Save.