Groups that the user belongs to

[panos]

Hi,

When we want to look at ip address of a user

show user ip-user-mapping ip  ........

Groups that the user belongs to (used in policy) comes empty.

I tried

debug user-id refresh group-mapping all

Also I can see all gorups on group mapping.

[UhMayYeah]

Paste the o/p of:

> show user ip-user-mapping ip <>

<> is  valid IPV4/V6 address-netmask.

> show user group name  <group-name>

Most of the times this indicates an issue with the Domain prefix.

[panos]

[UhMayYeah]

Check if you are using the Group domain users in a security rule.

[panos]

ok I found the problem

rule for gorup was deleted.ı missed that.

Thanks so much for help.