Cisco AMP SSO: How to manage the privileges of the account

[Mr_Wojtek]

Hello,

In nearly future, I want to set the SSO for Cisco AMP correlated with Okta.
I have a question about how to manage the accounts privileges level, don't want to give Admin privileges to all users.
The suggested way is AD Groups, but where to settle that in settings?  

Has anyone had a similar problem, if so how you managed to solve it?
I will be very grateful for the hint.

[stealthmode]

Hi,

You can integrate Cisco AMP with Okta, however, there's no provisioning of mapping AD groups into the console. The console has 2 user roles -> Admin and User. As the name implies, Admin has complete access whereas the User has RO access only. At a high level, these would be the steps that you'd have to follow:

* Integrate AMP console with Okta

* Enable SSO

* Create relevant user accounts on the AMP console and give them Admin or User roles on the AMP console

* Once the above is done, you'll be able to login via SSO