Abstract: A segmentation server enables user-based management of a segmentation policy. Administrators belonging to different user groups may have different limited visibility into traffic flows controlled by the segmentation policy and may be assigned different privileges with respect to viewing, creating, and modifying rules of the segmentation policy. Thus, the burden of administering the segmentation policy may be distributed between administrators associated with different user groups that each may have responsibility for a different segment.

Abstract: A segmentation server enables user-based management of a segmentation policy. Administrators belonging to different user groups may have different limited visibility into traffic flows controlled by the segmentation policy and may be assigned different privileges with respect to viewing, creating, and modifying rules of the segmentation policy. Thus, the burden of administering the segmentation policy may be distributed between administrators associated with different user groups that each may have responsibility for a different segment.

Abstract: A segmentation server enables user-based management of a segmentation policy. Administrators belonging to different user groups may have different limited visibility into traffic flows controlled by the segmentation policy and may be assigned different privileges with respect to viewing, creating, and modifying rules of the segmentation policy. Thus, the burden of administering the segmentation policy may be distributed between administrators associated with different user groups that each may have responsibility for a different segment.

Abstract: A method of activating and configuring an access point (AP) located at a location of a customer of an entity is disclosed. A first communication from the AP is received by a cloud-based Wi-Fi service manager, wherein the first communication includes a first unique identifier for the AP. A second communication from an administrator of the entity is received by the cloud-based Wi-Fi service manager, wherein the second communication includes a second unique identifier for the AP and an identifier for the customer of the entity. The AP is associated with the customer by the cloud-based Wi-Fi service manager. Configuration information for the customer is retrieved by the cloud-based Wi-Fi service manager. The configuration information is sent to the AP by the cloud-based Wi-Fi service manager, wherein the configuration information is used by the AP for configuration.