Creating a Group

  1. Access the SASE Administrator Portal.
  2. Click Team > Groups.
  3. Click Add Group.

    The Create new group window appears.



    Note:

    You can search and select users in the Assign new members section in the right-pane.



  4. Enter the group name and click Create Group.
  5. To add members to the group:
    1. Click the icon in the last column of the group and then select Manage Members.


    2. In the Assign new members section, click + and select the required members.
  6. To add networks to a group or to grant access to a network segment:
    1. Click the icon in the last column of the group and then select Manage Networks.


      The Assign Network to Group pop-up appears.

    2. Select the network and click Done.
      Note:

      • A group can also be automatically created as a result of an IDP sync over SCIM, and associate users with it.

      • When a group is deleted in the Identity Provider (for example, Okta), it remains in any policies or configurations where it was previously used. It appears greyed out and when you hover over it, Deleted Group message is displayed.



      • You cannot add the deleted group in any policies, but it can be removed from the existing policies.

      • When the deleted group is re-enabled, it is restored without any members. To add members again, you must manually assign them through the IdP.

      The members can access only the selected networks from the Check Point SASE Agent.

  7. To delete a group, hover over the group that you want to delete and click .


    The Delete Group window appears. Click Delete Group to delete it.