Create Device Security users, assign user roles, and view users in
Device Security in Strata Cloud Manager.
For Device Security in Strata Cloud Manager, use Common Services to manage all
user roles. You can allow users to authenticate using the Palo Alto Networks
SSO, or using a third-party identity provider (IdP).
Set up authentication for your Device Security users.
If you activated Device Security before June 2025
and use a third-party IdP SSO, you need to reconfigure
your third-party IdP through Common Services to
access Device Security in Strata Cloud Manager.
Strata Cloud Manager uses Common Services to manage user roles. From the
enterprise roles available in
Common Services, Device Security supports the Superuser role
and the View Only Administrator role.
For customers transitioning from the Device Security portal to
Device Security in Strata Cloud Manager, the Device Security user
roles map to the following Strata Cloud Manager roles:
