>
    Strata Copilot
    Suspend a Prisma Browser User
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Browser
    3. Prisma Access Browser Administration
    4. Manage Prisma Browser Users
    5. Suspend a Prisma Browser User
    Download PDF
    Prisma Browser

    Suspend a Prisma Browser User

    Table of Contents

    Suspend a Prisma Browser User

    Immediately revoke a user's access to Prisma Browser across all Desktop devices by suspending their account. Optionally wipe local browser data from suspended devices.
    Where Can I Use This?What Do I Need?
    Use user suspension as a remediation action when one of the following situations occurs:
    • A user's account is compromised.
    • A user has violated security policy.
    • The user left the organization and you need to immediately revoke access to the browser.
    Suspended users see a block page informing them that an administrator suspended their access to the browser.
    Platform Support
    DesktopExtensionMobile
    YesNoNo

    Suspend a User

    Suspend a user to immediately revoke their access to Prisma Browser on all Desktop devices.
    1. In the management console, navigate to AdministrationUsers.
    2. Locate the user you want to suspend and click the Actions menu (⋮).
    3. Select Suspend user.
      If the Suspend user & wipe data option appears, this indicates the wipe capability is enabled for your tenant. See Wipe Local Data from Suspended Devices for details.
    4. In the confirmation dialog, review the impact statement.
      The statement confirms that the user will be immediately suspended and will lose access to the browser from all of their known or future devices, except from their Prisma Browser Extension and mobile devices.
    5. (Optional) Select the Wipe all local device data from suspended devices checkbox to clear local browser data upon suspension.
      Wiping clears cookies, cache, bookmarks, browsing and download history, passwords and passkeys, autofill data, and site settings. Data re-syncs if the user is later resumed.
    6. Click Suspend to confirm.
      The user's status changes to suspended (or suspendedWipe if wipe was selected). All Desktop devices associated with the user display the suspension block page.

    Wipe Local Data from Suspended Devices

    After suspending a user, you can wipe local browser data from all their suspended Desktop devices.
    The user must already be in suspended status. If the user is active, use the suspend action with the wipe checkbox instead.
    Wiping clears cookies, cache, bookmarks, browsing and download history, passwords and passkeys, autofill data, and site settings from all suspended Desktop devices. This action bypasses draft mode.
    1. Navigate to AdministrationUsers.
    2. Locate the suspended user and click the Actions menu (⋮).
    3. Select Wipe devices data.
    4. Confirm the wipe action in the dialog.
      The user's status changes to suspendedWipe. Local data is wiped from all suspended Desktop devices on next connection. Data will re-sync if the user is later resumed.

    Resume a Suspended User

    Restore access to Prisma Browser for a suspended user.
    1. Navigate to AdministrationUsers.
    2. Locate the suspended user and click the Actions menu (⋮).
    3. Select Resume from suspend.
    4. Click Resume to confirm.
      The user's status returns to active. All Desktop devices regain access to Prisma Browser. If data was wiped, it re-syncs automatically.

    What the End User Sees

    When a user is suspended, their Prisma Browser Desktop displays a block page.
    The suspended user sees the following on all Prisma Browser Desktop instances:
    • Title: "An admin suspended access to the browser"
    • Description: "Please contact administrator for further details"
    • A Retry button that re-checks suspension status
    The block page persists until an administrator resumes the user. The user cannot bypass the page or use the browser for any activity.
    Prisma Browser Extension and mobile devices are not affected by user suspension.

    Audit Trail

    User suspension and resume actions generate audit events for compliance tracking.
    The following audit events are logged when user suspension actions are performed:
    Audit Events
    ActionAudit EventDetails
    Suspend userUserSuspendedRecords user ID, administrator, and whether wipe was requested
    Resume userUserActivatedRecords user ID and administrator

    Considerations

    Important details and limitations for user suspension.
    • User suspension applies only to Prisma Browser Desktop. Browser Extension and mobile devices continue to function normally.
    • Suspension takes effect immediately — the user does not need to restart the browser.
    • Suspension bypasses draft mode — changes apply immediately without requiring a publish action.
    • If wipe is selected, local data (cookies, cache, bookmarks, history, passwords, autofill, site settings) is cleared from all suspended Desktop devices. Data re-syncs upon resume.
    • A suspended user cannot register new devices.
    • To suspend or resume individual devices rather than all devices for a user, see Suspend a Prisma Browser Device.

    © 2026 Palo Alto Networks, Inc. All rights reserved.