For IT staff members, the Cisco Secure Endpoint (formerly AMP) management console allows for segregating sets of clients from each other in the form of Groups. These are similar in concept to Active Directory domains but are generally unrelated.

Cisco Secure Endpoint Groups contain a unique list of user and administrator accounts and a unique set of policies. They are ideal for allowing departmental unit computing managers and specialists have full control over their Secure Endpoint deployments without having to manage their own server infrastructure. Only the super-administrators of the Cisco Secure Endpoint management server can pass between Groups. Each Group administrator is restricted to his or her own environment.