Group mapping settings not listing AD groups in GUI

[MGRashmi]

Hi, 

I am trying to configure user-id based authentication in Palo Alto 5220 (Pan OS 9.0.2). I have integrated Palo Alto with AD using LDAP profile. I am not able to add the AD groups in the "Group Include" list as they are not being listed in the GUI. I am using panorama to manage the firewall. However, i am able to view the groups in CLI of the firewall if i give the command "show user group list" lists all the AD groups in CLI. Also, i am able to view the "user-ip" mapping in CLI. However, i am not able to select groups in GUI under "Group mapping" and security policies. Please suggest. 

[Mick_Ball]

@MGRashmi , Hi.

In Panorama you need to list a "Master Device" at the bottom of your device group page.

[Mick_Ball]

[MGRashmi]

Hi, 

Thanks for your response. Master device is already mentioned in the Panorama, still the group list is empty. 

[Mick_Ball]

I think the group mapping stuff is only visible if they were already active when imported to Panorama.

if you are adding groups from scratch you may need to follow this.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIOCA0