How to associate CIE with Mobile User Template stack
1613
Created On 06/17/23 07:53 AM - Last Modified 08/09/25 02:53 AM
Objective
To automatically populate user groups from CIE for Global Protect agent configuration, you need to associate the CIE profile with Mobile User Template stack which cannot be achieved currently from Web UI of Panorama.
Environment
- Panorama-managed Prisma Access Mobile Users
- Cloud Services Plugin
- Cloud Identity Engine Integration
Procedure
To associate the CIE profile to mobile user template stack, please use the below procedure:
- Login to CLI of Panorama.
- Switch to Configuration mode from Operational mode.
> configure
- Execute the below command:
# set template-stack Mobile_User_Template_Stack user-group-source cloud-identity-engine <CIE profile name>
# commit
- Once the commit is complete, you will see the user group information populating under Global Protect Agent configuration like the user groups auto populate under the Security policies of Device groups.