When your organization purchases Cortex XDR,
the Account Administrator can use the Palo Alto Networks hub to
assign roles to other members that have accounts in the Customer
To activate Cortex XDR apps, you must be assigned
either the Account Administrator or App Administrator role for Cortex
XDR. If you are activating
a new Cortex Data Lake instance you must also be assigned either
administrative role for Cortex Data Lake.
Account Administrators can assign additional users roles to manage
your apps. If the user only needs to manage a specific instance
of an app, you can assign the Instance Administrator role.
assign the roles, Account Administrators (or users that are assigned
the App Administrator for the relevant app) can take the following