FortiClient EMS using Group tag in FortiOS policies

[paul_hso]

Is it possible to use EMS Endpoint Group tags in FortiOS policies?

I have created a number of installers for 3rd party VPN access.  Based on installer ID the users are placed into an Endpoint Group.  I can see that each FCT is shown with a 'Group tag'.

However, these don't appear as dynamic groups in the Fortigate.  And it doesn't appear to be possible to create a Zero Trust tag based on the Group.

[gfleming]

Do you Third Parties have accounts in your AD? If so you could use AD groups for this purpose.