Enable Dynamic Privilege Access for Prisma Access Through Common Services

Table of Contents

Filter

Expand All | Collapse All

Prisma Access Docs

Administration
Version
- Prisma Access China
- 4.0 & Later
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred
Integrations
Incidents & Alerts
Release Notes
Version
- 5.2 Preferred and Innovation
- 5.1 Preferred and Innovation
- 5.0 Preferred and Innovation
- 4.2 Preferred
- 4.1 Preferred
- 4.0 Preferred
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred

Configure Dynamic Privilege Access Settings

Authorize User Group Mapping in Cloud Identity Engine for Dynamic Privilege Access

Enable Dynamic Privilege Access for
Prisma Access
Through
Common Services

Learn how to activate Dynamic Privilege Access for your

Prisma Access (Managed by Strata Cloud Manager)

tenants through

Common Services

Where Can I Use This?	What Do I Need?
Prisma Access (Managed by Strata Cloud Manager)	Prisma Access license with mobile user subscription Activation link Strata Logging Service Cloud Identity Engine Prisma Access Agent Role: Multitenant Superuser or Superuser with access to the Customer Support Portal

With Dynamic Privilege Access, IT administrators can map end users to several customer projects. An authorized user is allowed access to only one customer project at a time.

Dynamic Privilege Access

is an optional feature during the activation of a new

Prisma Access

tenant. After you enable this feature and the tenant is activated, DPA is set for the life of the tenant, and you can't disable it.

The option to enable DPA is available only once during the first activation of a new

Prisma Access

tenant. After the tenant is activated, the option is hidden for all the following activations, including add-ons and renewals. It's not available for existing tenants.

Contact your Palo Alto Networks account representative to activate this functionality for your tenant.

Activate the license for your

Prisma Access (Managed by Strata Cloud Manager)

Ensure to allocate licenses, plan your service connections, and add additional locations accordingly.

Enable available add-ons.

Select the check box for

Dynamic Privilege Access

Agree to the Terms and Conditions

Activate Now

. The products and add-ons that you're activating (such as

Prisma Access

Strata Logging Service

) are now provisioned. As the subscriptions are activating, the progress status will display. When the process is complete, the tenant status displays as

. You now have a tenant provisioned with instances of the products that you purchased. The tenant has one user — the account that you used when you began this process.

To complete the remaining product setup, you must access the products you purchased and perform any required post-installation configuration. For information about your products, see:

Open APIs

Strata Logging Service

Prisma Access (Managed by Strata Cloud Manager)

Cloud Identity Engine Getting Started Guide

Add user access and assign roles.

Provide access to users as

Project Admin

based on projects.