AI Canvas Administrator Role Requirements

Table of Contents

AI Canvas Administrator Role Requirements

AI Canvas features require specific administrator roles to access, create, edit, and manage AI Canvas dashboards, widgets, snapshots, and data exploration tools.

Where Can I Use This?	What Do I Need?
Strata Cloud Manager	Strata Cloud Manager Pro license Prisma Access license Acceptance of the Strata Copilot SEULA for the tenant

AI Canvas is available to users based on their assigned administrator roles in Strata Cloud Manager. The following table shows which administrator roles are required to access specific AI Canvas features.

Administrator Role Requirements by Feature

Feature	Description	Required Administrator Roles
View Canvas	View existing AI Canvas dashboards	Auditor Business Administrator Data Security Administrator Deployment Administrator IAM Administrator Internal Superuser Internal View Only Administrator MSP IAM Administrator MSP Superuser Network Administrator Security Administrator SOC Analyst Superuser Tier 1 Support View Only Administrator ADEM Tier 1 Support Web Security Administrator
Create New Canvas	Create new AI Canvas dashboards	Business Administrator Data Security Administrator Internal Superuser MSP Superuser Network Administrator Security Administrator Superuser Web Security Administrator
Delete Canvas	Delete existing AI Canvas dashboards	Business Administrator Data Security Administrator Internal Superuser MSP Superuser Network Administrator Security Administrator Superuser Web Security Administrator
Create Canvas using AI Prompts	Generate canvas dashboards using natural language prompts	Business Administrator Data Security Administrator Internal Superuser MSP Superuser Network Administrator Security Administrator Superuser Web Security Administrator
View Snapshot List	View saved snapshots of canvas dashboards	Auditor Business Administrator Data Security Administrator Deployment Administrator IAM Administrator Internal Superuser Internal View Only Administrator MSP IAM Administrator MSP Superuser Network Administrator Security Administrator SOC Analyst Superuser Tier 1 Support View Only Administrator ADEM Tier 1 Support Web Security Administrator
Create Snapshot	Create snapshots of canvas dashboards	Business Administrator Data Security Administrator Internal Superuser MSP Superuser Network Administrator Security Administrator Superuser Web Security Administrator
Create/Edit/Delete Schedules	Manage automated reporting schedules	Business Administrator Data Security Administrator Internal Superuser MSP Superuser Network Administrator Security Administrator Superuser Web Security Administrator
View All Widgets	View widget library and existing widgets	Auditor Business Administrator Data Security Administrator Deployment Administrator IAM Administrator Internal Superuser Internal View Only Administrator MSP IAM Administrator MSP Superuser Network Administrator Security Administrator SOC Analyst Superuser Tier 1 Support View Only Administrator ADEM Tier 1 Support Web Security Administrator
Create/Edit/Delete Widgets	Manage custom widgets in the widget library	Business Administrator Data Security Administrator Internal Superuser MSP Superuser Network Administrator Security Administrator Superuser Web Security Administrator
Widget Builder	Create new widgets using the widget builder tool	Business Administrator Data Security Administrator Internal Superuser MSP Superuser Network Administrator Security Administrator Superuser Web Security Administrator
View Data Explorer	Access and view the data explorer interface	Auditor Business Administrator Data Security Administrator Deployment Administrator IAM Administrator Internal Superuser Internal View Only Administrator MSP IAM Administrator MSP Superuser Network Administrator Security Administrator SOC Analyst Superuser Tier 1 Support View Only Administrator ADEM Tier 1 Support Web Security Administrator
Create/Edit/Delete Data Explorer	Manage data explorer queries and saved explorations	Business Administrator Data Security Administrator Internal Superuser MSP Superuser Network Administrator Security Administrator Superuser Web Security Administrator
Add Generated Widget to Library	Save widgets created in data explorer to the widget library	Business Administrator Data Security Administrator Internal Superuser MSP Superuser Network Administrator Security Administrator Superuser Web Security Administrator

Key Points About Access and Roles

Read-only access: Auditor, View Only Administrator, Internal View Only Administrator, Tier 1 Support, ADEM Tier 1 Support, SOC Analyst, Deployment Administrator, and IAM Administrator roles can view AI Canvas content but cannot create, edit, or delete items.
Full access: Business Administrator, Data Security Administrator, Internal Superuser, MSP Superuser, Network Administrator, Security Administrator, Superuser, and Web Security Administrator roles have complete access to all AI Canvas features.
Custom roles: Custom roles are not supported for AI Canvas access control.
Service entitlements: AI Canvas role assignment is also dependent on the specific Palo Alto Networks services and applications included in your license entitlements.

AI Canvas

Create an AI Canvas

Strata Cloud Manager Docs

AI Canvas Administrator Role Requirements

Strata Cloud Manager Docs

AI Canvas Administrator Role Requirements

Administrator Role Requirements by Feature

Key Points About Access and Roles

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Network Security

Endpoints

Visibility & Monitoring

Best Practices

Experts Corner

Translated Documents