>
    Strata Copilot
    Add a User-Defined App
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Administration
    4. Privileged Remote Access
    5. Use Privileged Remote Access
    6. Add a User-Defined App
    Download PDF
    Prisma Access

    Add a User-Defined App

    Table of Contents

    Add a User-Defined App

    Learn how to add a user-defined app for Privileged Remote Access.
    Where Can I Use This?What Do I Need?
    • Privileged Remote Access (PRA) portal
    • A web browser that supports HTML5
    • PRA credentials
    If you allow user-defined apps when you set up the Privileged Remote Access (PRA) portal, the users can manually add an app in the portal.
    User-defined apps are not visible to other users. PRA automatically applies the default profile for user-defined apps. User-defined apps are supported only for RDP, SSH, and VNC connections.
    To manually define an app from the PRA portal, the user needs to:
    1. Click Add App in the User-Defined Apps section.
    2. Enter the general details for the app:
      1. Select the App Type for the app (RDP, SSH, or VNC).
      2. Enter the App Name and an App Description.
      3. Enter the Destination FQDN or IP Address and Port for the app (if not using the default port).
    3. (Optional) Configure authentication settings for the app. The authentication settings depend on the app type.
      • For RDP apps:
        • (Optional) Enter the Domain associated with the RDP application. When you configure this field, the system applies the domain automatically during authentication, allowing users to log in using only their username.
        • (Optional) Enter the User Name and Password for the remote app, and confirm the password. The username and password are optional, but both must be provided or both must be empty.
      • For SSH apps:
        1. Enter the User Name and Password for the remote app, and confirm the password.
        2. (Optional) Enter the Private Key. If the private key is encrypted, enter the Passphrase.
        3. (Optional) Enter the Host Key entries for the remote host, which users can obtain from the ssh-keyscan command on the host. Enter one key per line. Lines that begin with # are comments.
      • For VNC apps:
        1. (Optional) Enter the User Name and Password for the remote app, and confirm the password. The username and password are optional, but both must be provided or both must be empty.
        2. (Optional) Select Enable File Transfer to allow the upload and download of files using SFTP (SSH File Transfer Protocol).
          1. Enter the SFTP Username and SFTP Password. If no password is used, provide the SFTP private key.
          2. Enter the SFTP Port to use for file transfers. The range is 0-64435.
          3. Enter the SFTP Private Key if not using the SFTP password.
          4. If the SFTP private key is encrypted, enter the SFTP Passphrase.
          5. (Optional) Enter the SFTP Host Key.
    4. To save the app settings, Create Custom App.
      The users can bookmark an administrator-created app or user-created app and launch them later by clicking on the link in the bookmark.

    © 2026 Palo Alto Networks, Inc. All rights reserved.