A Machine Group is a set of an organization’s internal, local machines that need to connect to Private Applications. These local machines are internal directories, such as an Active Directory, that organizations want to connect to prior to logging into Windows. You can manage Machine Groups within the Admin Portal.

You can create a new Machine Group whenever you add a new machine key. Zscaler recommends deploying a new Machine Group for every Machine Provisioning Key. Devices in a Machine Group can use Machine Tunnels to provide access to internal applications even when the device's Zscaler Client Connector is not connected to Private Applications. The Machine Provisioning Key must be added to the Zscaler Client Connector profile rule for successful Machine Tunnel enrollment. To learn more, see Configuring Zscaler Client Connector Profiles.

About the Machine Groups Page

On the Machine Groups page (Administration > Identity > Private Access > Machine Groups), you can do the following:

1. Filter the information that appears in the table. By default, no filters are applied.
2. View a list of all the Machine groups that are configured for your organization. For each Machine group, you can see the name of the Machine group.
3. Edit a configured Machine group.
4. Delete a Machine group.
5. Expand all of the rows in the table to see more information about each Machine group.