Role Migration Notes

If you used the hub (previously called the Cloud Services portal) prior to April 2019, these are role management changes of which you should be aware.
If you were a user of the hub or if you managed the activation of Application Framework apps prior to April 2019, then you will experience significant changes with how you manage user roles. For Application Framework apps, you no longer manage user roles in the Customer Support Portal. Instead, you manage these roles in the Cloud Services Portal. Additionally, the list of roles has changed. In some cases, roles are collapsed in to a single role, while in other cases, the list of roles available for an app has changed. Also, some, but not all, Application Framework apps and services names have changed.
For a description of the new Role Management user interface, see Manage App Roles.
access-management.png
role-management-ui.png

Terminology Change

Palo Alto Networks Application Framework properties changed names in February of 2019. The remainder of this topic will use the new product names identified in the following table:
Old Name
New Name
Application Framework
Cortex, or Cortex platform
Cloud Services Portal
hub
Logging Service
Cortex Data Lake
Magnifier
Cortex XDR™ – Analytics
This is now just one piece of a larger suite of applications, which are collectively known as Cortex XDR. The other half of this suite is Cortex XDR™ – Investigation and Response.
All other product names have remained the same.

Role Management Changes

Prior to April, 2019, you managed all roles in the Customer Support Portal. Now you manage roles specific to Cortex apps and other properties using the hub. All other role management remains in the Customer Support Portal.
Where you previously had a role that was specific to an app (for example, the Magnifier role), you now have a single role (Instance Administrator) that is granted to a user for a specific app.
Some apps (for example, Cortex XDR) implement a constellation of roles that you can grant to a user. These roles are managed in the hub, but you should refer to the product documentation for the app to obtain details on these app-specific roles.
Additionally, when Palo Alto Networks migrated role management from the Customer Support Portal roles to the hub, existing users received the following roles:
Customer Support Portal Role
Hub Role
Super User
Account Administrator
Standard User
None
Limited User
None
Super User and one of the CSP app roles
Account Administrator
Standard User and Directory Sync Service
App Administrator for Directory Sync Service.
Standard User and Logging Service
App Administrator for Cortex Data Lake.
Standard User and Magnifier
App Administrator for Cortex XDR – Analytics.
Standard User and Traps
App Administrator for Traps.
Standard User and XDR
App Administrator for Cortex XDR – Investigation and Response.

Recommended For You