Panorama does not store the user to group membership today since this can differ across devices. This will depend on the AD setup and how it maps to agents across the deployed devices. Please follow up with your local SE to file a feature request for the potential addition of this functionality in a future release. Today you can setup a scheduled report in Panorama that utilizes a device DB, instead of a Panorama DB. This will cause Panorama to send the device a report definition which will cause a statistics file to be sent hourly from the device to Panorama. The stats file will be used when the report is run to aggregate the data. This approach gets around the limitation of HDD/SSD space on the device causing data to be missing if data is rolling faster than the report period. Panorama can run an adhoc report utilizing a device DB if the device contains enough data for the reporting period. This means that the report will not need to be scheduled in advance.
... View more