Enable Role Based Access for Advanced IP Defense on Strata Cloud Manager

1. Log in to Strata Cloud Manager.
2. (New administrators only) Add Access to your tenant where you have an Advanced IP Defense.

   This step is required only if the administrator you are granting Advanced IP Defense access to is not already registered with the Palo Alto Networks Customer Support Portal (CSP).
3. Select System SettingsIdentity & Access Management and select one or more administrators.

   1. Select User and for Identity Address, enter the email address for the administrator you added in the previous step.
   2. For Apps & Services, select Advanced IP Defense.
   3. Select one of the supported predefined Role.
4. Click Assign Roles.
5. For the Apps & Services, select one of the following:

   • All Apps & Services—Applies the access privileges for the predefined role to all apps and services available on your tenant.
   • Prisma Access & NGFW Configuration—Applies the access privileges for the predefined roll only for the configuration objects available in ConfigurationPrisma Access & NGFW Configuration.
6. (Optional) Add Another to configure additional role-based access to other apps and services.
7. Submit.