User Groups
On this page, you can manage User Groups and their Roles in your account.
Each User Group has a unique name in the Infinity Portal account.
|
Note - Only administrators with User Admin permission get access to the User Groups tab and give roles to a user group. |
When you add users to a specific User Group, the assigned User Group shows in the column of the users table. The User Groups are cumulative, which means that the user can belong to different User Groups and receive different Roles.
Managing User Groups
|
Note - All fields marked with an asterisk (*) are mandatory. |
-
Go to > User Groups.
The page displays the list of the existing User Groups.
-
In the toolbar, click New.
The Add User Group window opens.
-
In the Details tab, enter the required details:
-
Name - Provide a name to the new User group
-
Description - Describes the group
-
IDP ID - For users that log in with SSO Single Sign-On (SSO) - A session/user authentication process that permits a user to enter one name and password in order to access multiple applications., enter the ID of the group as it shows in your Identity Provider A system entity that creates, maintains, and manages identity information for principals and also provides authentication services to relying applications within a federation or distributed network. Acronym: IdP or IDP.. As an optional function, it depends on if SSO Authentication is on. See SSO Authentication Setup with Identity Provider.
-
-
In the Members tab, add new members:
-
Click Add member. The window opens with the list of the account's users.
-
Select the users that you wish to add.
-
Click OK.
-
-
For an account of type Managed Security Service A Check Point service offering that helps customers with deployments or technical services for Check Point products. Provider (MSSP Managed Security Service Provider (MSSP) - An managed security service provider (MSSP) provides outsourced monitoring and management of security devices and systems. Common services include managed firewall, intrusion detection, virtual private network, vulnerability scanning and anti-viral services.) or Distributor, in the Accounts tab, below Associated Accounts, select one of these:
-
This account [NAME OF YOUR INFINITY PORTAL ACCOUNT] only
The group is associated only with your Infinity Portal account. This is the default configuration.
-
[NAME OF YOUR INFINITY PORTAL ACCOUNT] + All Child Accounts
The group is associated with your Infinity Portal account and all of its child accounts (including child accounts that you create in the future).
-
Only specific accounts
This group is associated with Infinity Portal accounts that you add in the Include Accounts field.
-
All accounts except
This group is associated with your Infinity Portal account and all of its child accounts (including child accounts that you create in the future). Accounts that you add in the Exclude Accounts field are not associated with this group.
Example - The MSSP account Cyber MSSP has two child accounts: Acme Corp. and Logistics Inc The administrator adds Acme Corp. in the Exclude Accounts field. As a result, the group is associated only with the Cyber MSSP account and the Logistics Inc. account..
-
-
Assign roles to the group:
-
Global Roles - Select a Global Role from the list. See Users.
-
Specific Service Roles - Select the Specific Service Role in the Infinity Portal services that you want to enable for this User Group. See Specific Service Roles.
Example - When you select Support Contact Point for Harmony Connect in your Admins user group, this role automatically applies to users in the Admins Group. This role automatically applies to users in the Admins group when they log in to Harmony Connect.
-
-
Click Add.
The new User Group shows on the list.
|
Note - You can create a User Group without members and add the members later. |
|
Note - If in the Accounts tab you configured a User Group to be associated with a child account automatically, you can edit this User Group only from the parent account. |
|
Important - Immediately after you remove a user from a group, the user loses permissions that were based on the group. |
- Go to > User Groups.
-
Select the User Group that you want to edit >click Edit.
-
Make changes in the User Group parameters > click Save.
-
From the list, select the User Group.
-
Click Delete.
-
Right-click the top row of the table that contains the names of the columns.
A popup window opens.
-
Select columns to show in the table.
Only the selected columns appear in the table.
-
In the Search field, click the Filter icon .
The Filters pane shows on the right side of the Dashboard.
-
Apply one or more filter criteria.
-
To clear filter data, click Clear All.