You must place each application segment you configure into a segment group. This allows you to configure user access policies based on segment groups. For example, if you have a set of defined applications that you want only users from the "Sales" department to access, you can create a segment group called "Sales Applications" and apply to it all sales-related applications. You can then create an access policy using that segment group.

However, you cannot assign an application segment to multiple segment groups. For example, if you place Salesforce in the "Sales Applications Group," you cannot add Salesforce to another group.

You can add or modify a segment group while configuring an application segment or you can do so manually at any time.

About the Segment Groups Page

On the Segment Groups page (Policies > Access Control > Private Applications > Segment Groups), you can:

1. View and add DNS search domains.
2. Expand all rows in the table to see more information about each segment group.
3. Add a new segment group.
4. Filter the information that appears in the table. By default, no filters are applied.
5. View a list of all segment groups that were configured for your organization. For each segment group, you can see:
   • Name: The segment group name.
   • Status: Indicates that the segment group is enabled or disabled.

6. See a graphical view for how the segment group connects to other configuration objects (e.g., Application Segments, Server groups, etc.)

7. Edit an existing segment group.
8. Delete a segment group.

9. Migrate or delete an existing segment group policy.