Role Migration Notes
Table of Contents
Role Migration Notes
If you used the hub (previously called the Cloud Services
portal) prior to April 2019, these are role management changes of
which you should be aware.
If you were a user of the hub or if you managed the activation
of Application Framework apps prior to April 2019, then you will
experience significant changes with how you manage user roles. For
Application Framework apps, you no longer manage user roles in the
Customer Support Portal. Instead, you manage these roles in the
Cloud Services Portal. Additionally, the list of roles has changed.
In some cases, roles are collapsed in to a single role, while in
other cases, the list of roles available for an app has changed.
Also, some, but not all, Application Framework apps and services
names have changed.
For a description of the new Role Management user interface,
see Manage App Roles.
Terminology
Change
Palo Alto Networks Application Framework properties
changed names in February of 2019. The remainder of this topic will
use the new product names identified in the following table:
Old Name | New Name |
|---|---|
Application Framework | Cortex, or Cortex platform |
Cloud Services Portal | hub |
Logging Service | Cortex Data Lake |
Magnifier | Cortex XDR™ – Analytics This is now
just one piece of a larger suite of applications, which are collectively known
as Cortex XDR. The other half of this suite is Cortex XDR™ – Investigation
and Response. |
All other product names have remained the same.
Role Management
Changes
Prior to April, 2019, you managed all roles in
the Customer Support Portal. Now you manage roles specific to Cortex
apps and other properties using the hub. All other role management remains
in the Customer Support Portal.
Where you previously had
a role that was specific to an app (for example, the Magnifier role),
you now have a single role (Instance Administrator) that is granted
to a user for a specific app.
Some apps (for example, Cortex
XDR) implement a constellation of roles that you can grant to a
user. These roles are managed in the hub, but you should refer to
the product documentation for the app to obtain details on these
app-specific roles.
Additionally, when Palo Alto Networks
migrated role management from the Customer Support Portal roles
to the hub, existing users received the following roles:
Customer Support Portal Role | Hub Role |
|---|---|
Super User | Account Administrator |
Standard User | None |
Limited User | None |
Super User and one of the CSP app roles | Account Administrator |
Standard User and Directory Sync Service | App Administrator for Directory Sync Service. |
Standard User and Logging Service | App Administrator for Cortex Data Lake. |
Standard User and Magnifier | App Administrator for Cortex XDR – Analytics. |
Standard User and Traps | App Administrator for Traps. |
Standard User and XDR | App Administrator for Cortex XDR – Investigation
and Response. |