Focus

Prisma Access

Enable Dynamic Privilege Access for Prisma Access Through Common Services

Table of Contents

Filter

Expand All | Collapse All

Prisma Access Docs

Release Notes
Select a Document
- 6.1 Preferred and Innovation
- 6.0 Preferred and Innovation
- 5.2 Preferred and Innovation
- 5.1 Preferred and Innovation
- 5.0 Preferred and Innovation
- 4.2 Preferred
- 4.1 Preferred
- 4.0 Preferred
- 3.2 Preferred and Innovation
Activation & Onboarding
Administration
Select a Document
- 4.0 & Later
- Prisma Access China
Integrations
Incidents & Alerts

Configure Dynamic Privilege Access Settings

Authorize User Group Mapping in Cloud Identity Engine for Dynamic Privilege Access

Enable Dynamic Privilege Access for Prisma Access Through Common Services

Learn how to activate Dynamic Privilege Access for your Prisma Access (Managed by Strata Cloud Manager) tenants through Common Services.

Where Can I Use This?	What Do I Need?
Prisma Access (Managed by Strata Cloud Manager)	Prisma Access license with mobile user subscription Activation link Strata Logging Service Cloud Identity Engine Prisma Access Agent Role: Multitenant Superuser or Superuser with access to the Customer Support Portal

With Dynamic Privilege Access, IT administrators can map end users to several customer projects. An authorized user is allowed access to only one customer project at a time.

Dynamic Privilege Access is an optional feature during the activation of a new Prisma Access tenant. After you enable this feature and the tenant is activated, DPA is set for the life of the tenant, and you can't disable it.

The option to enable DPA is available only once during the first activation of a new Prisma Access tenant. After the tenant is activated, the option is hidden for all the following activations, including add-ons and renewals. It's not available for existing tenants.

Contact your Palo Alto Networks account representative to activate this functionality for your tenant.
Activate the license for your Prisma Access (Managed by Strata Cloud Manager).
Ensure to allocate licenses, plan your service connections, and add additional locations accordingly.
Enable available add-ons.
Select the check box for Dynamic Privilege Access.
Agree to the Terms and Conditions.
Activate Now. The products and add-ons that you're activating (such as Prisma Access or Strata Logging Service) are now provisioned. As the subscriptions are activating, the progress status will display. When the process is complete, the tenant status displays as Up. You now have a tenant provisioned with instances of the products that you purchased. The tenant has one user — the account that you used when you began this process.
To complete the remaining product setup, you must access the products you purchased and perform any required post-installation configuration. For information about your products, see:
Add user access and assign roles.
Provide access to users as Project Admin based on projects.

Configure Dynamic Privilege Access Settings

Authorize User Group Mapping in Cloud Identity Engine for Dynamic Privilege Access

Prisma Access Docs

Enable Dynamic Privilege Access for Prisma Access Through Common Services

Prisma Access Docs

Enable Dynamic Privilege Access for Prisma Access Through Common Services

Activation and Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Network Security

Endpoints

Visibility & Monitoring

FedRAMP

Hardware Reference

Hardware Quick Start Guides

Virtual ION Deployment

3rd Party Integrations

Best Practices

Experts Corner