Role Migration Notes
Users of the Cloud Services Portal prior to role management in the Customer Support Portal need to be aware of these changes.
If you were a user of the Cloud Services Portal, or if you managed the activation of Application Framework apps, prior to April 2019, then there are significant changes in terms of how user roles are managed. Be aware that for Application Framework apps, user roles are no longer managed in the Customer Support Portal. Instead, you manage these roles in the Cloud Services Portal. Further, the list of roles with which you may be familiar have changed. In some cases, they have collapsed to a single role, while in others the list of roles available for an app has changed. Finally, the names of some, but not all, Application Framework apps and services have changed.
This topic outlines these differences.
For a description of the new Role Management user interface, see Manage App Roles.
Palo Alto Networks Application Framework properties changed names in February of 2019. The remainder of this topic will use the new product names identified in the following table:
Cortex, or Cortex platform
Cloud Services Portal
Cortex Data Lake
Cortex XDR™ – Analytics
This is now just one piece of a larger suite of applications, which are collectively known as Cortex XDR. The other half of this suite is Cortex XDR™ – Investigation and Response.
All other product names have remained the same.
Role Management Changes
Prior to April, 2019, you managed all roles in the Customer Support Portal. Now, you manage roles specific to Cortex apps and other properties using the Cortex hub. All other role management remains in the Customer Support Portal.
Where you previously had a role that was specific to an app (for example, the Magnifier role), you now have a single role (Instance Administrator) that is granted to a user for a specific app.
Some apps (for example, Traps) implement a constellation of roles which you can grant to a user. These roles are managed in the Cortex hub, but you should refer to the product documentation for the app in order to obtain details on these app-specific roles.
When Palo Alto Networks migrated role management from the Customer Support Portal roles to the Cortex hub, existing users received the following roles:
Customer Support Portal Role
Cortex Hub Role
Super User and one of the CSP app roles
Standard User and Directory Sync Service
App Administrator for Directory Sync Service.
Standard User and Logging Service
App Administrator for Cortex Data Lake.
Standard User and Magnifier
App Administrator for Cortex XDR – Analytics.
Standard User and Traps
App Administrator for Traps.
Standard User and XDR
App Administrator for Cortex XDR – Investigation and Response.
Manage App Roles
The roles assigned to your account determine what you are able to do with any given Cortex app. ...
New Features: April 2019
New Features: April 2019 Feature Description Traps-Only Detection New Alert for Recurring Rare IP Access Cortex XDR – Analytics no longer requires you to deploy ...
Manage Roles When your organization purchases Cortex XDR, the Account Administrator can use the Palo Alto Networks Cortex hub to assign roles to other members ...
Everything You Need to Configure Cortex XDR
Review the prerequisites for setting up Cortex XDR apps. ...
Assign Roles to Manage Cloud Services
Assign Roles to Manage Cloud Services To assign roles to or create other users in the Customer Support Portal, you must be assigned the Super ...
The Palo Alto Networks Cortex hub offers some standard roles. Some apps also offer custom roles. ...
Set Up Cortex XDR
Set Up Cortex XDR Cortex XDR Configuration Overview Everything You Need to Configure Cortex XDR Review the prerequisites for setting up Cortex XDR apps. Manage ...
Assign Roles to Traps Management Service Users
Assign built-in roles to provide administrative access to Traps management service. ...
Cortex XDR Configuration Overview With Cortex XDR you can use a variety of sensors to integrate all your network, endpoint, and cloud data. For the ...