Manage: Scope Management

Log in to
Strata Cloud Manager
.
Select
Manage
Access Control
Scope Management
.
Create New Scope
.
Define the Scope Management configuration.
Scope Management configurations are labeled as a
scope object
.
Enter a descriptive
Name
.
Select
Folders
and check (enable) the folders, firewalls, and
Prisma Access
deployments you want to include in the scope.
Selecting a firewall also includes the folder that the selected firewall is associated with in the scope management configuration. Only the immediately associated folder is included, and not the parent folder.
Select
Snippets
and check (enable) the snippets you want to include.
Add
the scope object.

Apply the scope management configuration to
Strata Cloud Manager
admins.
Assign Users
to the Scope Object you created in the previous step.

Select a
Role
for the
Strata Cloud Manager
admin. For example, you can select MSP Superuser for a user who needs access to all functions for all tenants.
Default is
None
. See the Common Services Multiple Platform and Enterprise Roles for more information about the read and write access privileges for each available Role.
Select a specific
Strata Cloud Manager
admin and
Clear Role
to remove the currently assigned Common Services role. This applies the default
None
role to the admin.
To modify an existing scope to edit the name, and to add or remove folders, select the scope object, modify the scope as needed, and
Update
the scope.
To modify the assigned users, to add more users or change the users, click
Assigned Users
and modify as needed, and
Close
the window.