Static roles in Security Cloud Control

Login

Cisco Security Cloud Control Administration Guide

Overview of Cisco Security Cloud Control
Platform Services for all Products
- Manage Security Devices
- Global Search
  - Initiate Full Indexing
  - Perform a Global Search
- Preview and Deploy Configuration Changes for All Devices
- In-Product Announcements
- Talos Intelligence
- Additional Feature and Configuration Suggestions
- Integrate Identity Services Engine with Security Cloud Control
- Organization Notification Settings
- Security Cloud Control Platform Navigator
- Set Background Theme
- Give us your Feedback
Managing Organizations
- Create an Organization
- Setting a Region for an Organization
- View Organization Details
- Rename an organization
- Switch Organizations
Managing Products and Subscriptions
- About subscriptions
- Single Product Instance in an Organization
- Claim a Subscription
- Activate a Product Instance
  - Activate an Inactive Product Instance
  - Activate an Externally Managed Product Instance
  - Activation Code to Activate Externally Managed Product Instance
  - Activate a Product Instance with Further Inputs
- View Product Subscription Details
- Deactivate a product instance
Managing Role-Based Access Control
- Role-Based Access Control in an Organization
  - Managing Users
  - Managing Groups
  - Managing Roles
- Invite a User
- Import Users
- View or Find Users
- Reinvite a User
- Edit a User Name
- Assign Roles to a User
- Add a User to Groups
- Assign Roles to Existing Users
- Remove Role Assignments
- Create a Custom Role
- Edit a Custom Role
- Delete a Custom Role
- Custom Role for Cisco Secure Workload
- Reset Multifactor Authentication Settings
- Reset User Password
- Disable a User Account
- Restore a User Account
- Remove a User Account
- Create a New Group
- Edit a Group Name
- Add Users to a Group
- Assign Roles to Groups
- Remove users from a group
- Delete a Group
- Manage Role Delegation
- Logging the Events
  - View and Export the Activity Log
- Static roles in Security Cloud Control
Managing Domains
- Domains Overview
- Claim and verify a domain
Common Objects and Object Groups
- Common Objects
  - Key characteristics of common objects
- Common Object Groups
  - Key characteristics of object groups
- Supported Types of Common Objects
  - Supported network object formats
- Object naming requirements
- Object limits within an organization
- Common object store
  - Objects that can be combined in an object group
  - Objects that cannot be combined in an object group and shared between Secure Access and Catalyst SD-WAN
  - Search, filter, and view common objects
- Create a Secure Access Network Object
- Create a network object common to Catalyst SD-WAN and Secure Access
- Edit an SD-WAN or Secure Access Common Network Object
- Edit an object group in use by Secure Access and Catalyst SD-WAN
- Create a network object group
- Delete a common object or object group
- SASE Management
Managing Identity Provider Group Mapping
- Identity Provider Group Map
- Map identity provider group
- Edit an identity provider group mapping
- Link an External Identity Provider
- Delink an External Identity Provider
Integrating Identity Providers
- Prerequisites
- SAML Response Requirements
- Step 1: Initial setup
- Step 2: Provide Security Cloud SAML metadata to your identity provider
- Step 3: Provide SAML metadata from your IdP to Security Cloud
- Step 4: Test your SAML integration
- Step 5: Activate the integration
- Troubleshooting SAML errors
Identity Service Provider Instructions
- Integrating Auth0 with Security Cloud Sign On
- Integrating Microsoft Entra ID with Security Cloud Sign On
- Integrating Duo with Security Cloud Sign On
- Integrating Google Identity with Security Cloud Sign On
- Integrating Okta with Security Cloud Sign On
- Integrating Ping Identity with Security Cloud Sign On
Security Cloud Control API Keys
- About Security Cloud Control API Keys
- Generate an API Key
- View API Key Details
- Disable an API Key
- Re-enable a Disabled API Key
- Delete an API Key
- Refresh Access Token
Frequently Asked Questions
- General FAQs
- Security Cloud Sign On FAQs
- Switching from Google Authenticator to Duo MFA FAQs
- Provisioning FAQs
- Role-Based Access Control FAQs
- Identity Provider and Multitenancy FAQs
Additional Documentation and Support
- Security Cloud Control Documentation
- AI Defense Documentation
- Security Cloud Control Firewall Management Documentation
- Multicloud Defense Documentation
- SASE Management with Common Objects
- Secure Access Documentation
- Secure Workload Documentation
- Browsers Supported by Security Cloud Control
- Cisco Support Access to your Organization
  - Enable Cisco Support Access
  - Disable Cisco Support Access
- Cisco Customer Support

Managing Role-Based Access Control Static roles in Security Cloud Control

Last updated: Mar 30, 2026

Previous topic View and Export the Activity Log Next topic Managing Domains