Segment group policies are being phased out. You can no longer add a segment group policy using the Group Policy tab. To control application access based on segment group, you must use an access policy rule that includes the group within its Criteria. To learn more, see Configuring Access Policies.

If you want to retain or modify an existing segment group policy, you must migrate it. The migration will convert all segment group policy rules formerly under the Group Policy tab into an access policy rule that appears on the Access Policy page. You can also delete an existing segment group policy without migrating its rules.

To migrate segment group policy rules to an access group policy rule:

1. Go to Resource Management > Application Management > Segment Groups.
2. On the Segment Groups page, locate the segment group you want to migrate policy rules for and click the Migration icon ().

The Segment Groups page only displays the icon for groups that contain an existing segment group policy that has not been migrated or deleted.

3. In the Edit Segment Group window, review the policy rule information and click Migrate All Rules.

After the segment group policy rule is successfully migrated, it is automatically deleted and you are redirected to the Access Policy page.

Be aware that ZPA evaluates access policy rules prior to any segment group policy rules that have not been migrated. You can use Diagnostics to verify that the rules you migrated to your access policy are taking effect.

Deleting a Segment Group Policy

If you decide to delete any segment group policy rules without migrating them, review the policy information to ensure that your organization does not require these rules, or that suitable access policy rules already exist that meet your needs.

To delete segment group policy rules without migrating them:

1. Go to Administration > Segment Groups.
2. On the Segment Groups page, locate the segment group you want to migrate policy rules for and click the Migration icon ().
3. In the Edit Segment Group window, review the policy rule information and click Delete All Rules.