Login

Cisco Security Cloud Control Administration Guide

About Cisco Security Cloud Control
- Products Managed by Cisco Security Cloud Control
Platform Services for all Products
- Manage Security Devices
- Manage Objects
- Global Search
  - Initiate Full Indexing
  - Perform a Global Search
- Preview and Deploy Configuration Changes for All Devices
- Additional Configuration Assistance
- Integrate Identity Services Engine with Security Cloud Control
- Organization Notification Settings
- Firewall Manager Platform Navigator
- Set Background Theme
- Give us your Feedback
Managing Organizations
- Create an Organization
- Setting a Region for an Organization
- Organization Details
- View Organization Details
- Rename an organization
- Switch organizations
Managing Products and Subscriptions
- Overview of Subscription Process
- Single Product Instance in an Organization
- Claim a Subscription
- Activate a Product Instance
  - Activate an Inactive Product Instance
  - Activate an Externally Managed Product Instance
  - Activation Code to Activate Externally Managed Product Instance
  - Activate a Product Instance with Further Inputs
- View Product Subscription Details
- Deactivate a Product Instance
Onboard Devices to Security Cloud Control
- Secure ASA Onboarding Methods
- Secure Firewall Threat Defense Onboarding Methods
- On-Premises Firewall Management Center Onboarding Methods
- Meraki Security Appliance Onboarding Methods
- Cisco IOS Device Onboarding Methods
- Secure Firewall Chassis Manager Onboarding Methods
- AWS Virtual Private Cloud Onboarding Methods
- Cisco Umbrella Organization Onboarding Methods
Managing Role-Based Access Control
- Role-Based Access Control in an Organization
  - Managing Users
  - Managing Groups
  - Managing Roles
- Invite a User
- Import Users
- View or Find Users
- Edit a User Name
- Assign Roles to a User
- Add a User to Groups
- Assign Roles to Existing Users
- Remove Role Assignments
- Create a Custom Role
- Edit a Custom Role
- Delete a Custom Role
- Custom Role for Cisco Secure Workload
- Reset Multifactor Authentication Settings
- Reset User Password
- Disable a User Account
- Restore a User Account
- Remove a User Account
- Create a New Group
- Edit a Group Name
- Add Users to a Group
- Assign Roles to Groups
- Remove users from a group
- Delete a Group
- Manage Role Delegation
- Logging the Events
  - View the Activity Log
Managing Domains
- Overview
- Claim and verify a domain
Managing Identity Provider Group Mapping
- Identity Provider Group Map
- Map Identity Provider Group
- Edit an identity provider group mapping
- Link an External Identity Provider
- Delink an External Identity Provider
Integrating Identity Providers
- Prerequisites
- SAML Response Requirements
- Step 1: Initial setup
- Step 2: Provide Security Cloud SAML metadata to your identity provider
- Step 3: Provide SAML metadata from your IdP to Security Cloud
- Step 4: Test your SAML integration
- Step 5: Activate the integration
- Troubleshooting SAML errors
Identity Service Provider Instructions
- Integrating Auth0 with Security Cloud Sign On
- Integrating Microsoft Entra ID with Security Cloud Sign On
- Integrating Duo with Security Cloud Sign On
- Integrating Google Identity with Security Cloud Sign On
- Integrating Okta with Security Cloud Sign On
- Integrating Ping Identity with Security Cloud Sign On
Additional Documentation and Support
- Security Cloud Control Documentation
- AI Defense Documentation
- Firewall in Security Cloud Control Documentation
- Multicloud Defense Documentation
- Secure Access Documentation
- Secure Workload Documentation
- Cisco Support Access to your Organization
  - Enable Cisco Support Access
  - Disable Cisco Support Access
- Customer Support Resources

Managing Role-Based Access Control Logging the Events View the Activity Log

Last updated: Aug 28, 2025

View the Activity Log

The activity details are presented in a tabular format that has a filtering option. You can filter and search for specific events based on criteria such as date and time range, user, and event subtype. By default, the table displays activity data for the most recent 90 days.

Procedure

1	In the Security Cloud Control platform menu, choose Platform Services > Platform Management.
2	Choose Access Management > Activity Log. The Activity Log page displays the list of events and their details such as type of event, email address of the user, event summary, and, date and time of the event.
3	To see the details of an event in the list, expand the corresponding row.
4	To search for specific events, click Filters. In the Filter events slide-in pane, select the criteria based on which you want to filter the list of events. The criteria could be date and time range, event subtype, or users. You can also select a combination of these criteria. Click Filter events. The page displays all events based on the search criteria.
5	(Optional) To remove the filters and see the entire list of events, click Reset all.
6	(Optional) To see the latest set of events, click Refresh event data. This action applies the current filters and displays the latest data.

Previous topic Logging the Events Next topic Managing Domains