After you activate
Cloud Identity Engine on a tenant and
add child tenants, you can share
(CIE) with the child tenants in your hierarchy.
Regardless if you activate a new CIE instance on an existing tenant with existing
Prisma Access or you activate a new CIE instance on a new tenant, you
can share CIE under the following circumstances:
- Share CIE from a parent tenant during a new Prisma Access
activation
- Share CIE from a parent tenant during the Prisma Access edit
operation
- Share CIE to a child tenant that is not already running CIE
- Share CIE to a child tenant that is in the same region as the parent
If you don't have access to a parent tenant, the sharing option is not displayed. The
parent can control which child can have access to see CIE sharing through Identity
& Access Management
Roles.