topic Usergroup in Panorama Discussions

Usergroup

fkizhuvara — Tue, 22 Apr 2025 07:00:14 GMT

We have firewall managed by Panorama and have used security group from Active Directory in the polices.
Want to know where do we check ( panorama or the firewall) the list of groups seen by the firewall and list of users in a group.

And also want to know the cmd for manual sync and do we need to run it on Panorama or Firewall.

Re: Usergroup

mshekh — Tue, 22 Apr 2025 08:49:42 GMT

Hi @fkizhuvara ,

Please refer the below kb for your reference and User id information should be checked at firewall.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRyCAK

Re: Usergroup

fkizhuvara — Tue, 22 Apr 2025 10:25:19 GMT

That KB is for User ID agent setup, not what I am looking for.
Below command works on the firewall but not on Panorama.

show user group list

this will display user groups known to the firewall

show user group name " cn of group listed from above (use quotes if you have spaces)"

this will list all known members of that group

Re: Usergroup

fkizhuvara — Tue, 22 Apr 2025 10:27:47 GMT

@mshekh

That KB is for User ID agent setup, not what I am looking for.
Below command works on the firewall but not on Panorama.

show user group list

this will display user groups known to the firewall

show user group name " cn of group listed from above (use quotes if you have spaces)"

this will list all known members of that group

Re: Usergroup

fkizhuvara — Tue, 22 Apr 2025 16:04:25 GMT

Got a ticket open as per TAC we need to run the command on the firewall.