>
    Strata Copilot
    Manage Devices for Client Tenants
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Administrator’s Guide
    4. Prisma SD-WAN Device and Tenant Management
    5. Manage Devices for Client Tenants
    Download PDF
    Prisma SD-WAN

    Manage Devices for Client Tenants

    Table of Contents

    Manage Devices for Client Tenants

    Manage Devices in the Prisma SD-WAN lifecycle for Client Tenants. MSP tenants can manage the device's lifecycle based on their Roles and Permissions.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN (Managed by Strata Cloud Manager)
    • Prisma SD-WAN
    Prisma SD-WAN ION devices can be allocated to the parent (MSP) or a child (client) tenant when you use the magic link to activate the SD-WAN service and ION devices. MSP tenants can manage the device's lifecycle based on their Roles and Permissions.

    Allocate a Device

    1. Log in to the MSP Portal with valid credentials.
    2. Select ManageDevicesION Devices.
      Multiple regions where the MSPs can manage their client tenants are listed.
    3. Select the region from where the device needs to be allocated to the client tenant.
      The inventory of devices allocated to the MSP tenant for the region is listed in the Available for Client Allocation state.
      Sales Order # can be used to group all devices in the same order and simplify bulk device allocation to a tenant.
      Order Association Date (UTC) shows the date associated with the order.
    4. (Optional) Apply any of the following filter criteria to refine your search.
      • Search for a device with the model or serial #.
      • Select any client from the drop-down to view the devices allocated to that client by the logged in MSP.
      • Choose the state of the device from the drop-down.
    5. Allocate the device to a client tenant.
      1. Select the device and choose Allocate the device from the ellipsis menu.
      2. From the Allocate Device window, select Any Client available to the MSP.
      3. Confirm to Allocate the device.
        The allocated device is now listed in the client tenant’s inventory in an Unclaimed state.
        Select Bulk Actions to allocate multiple devices to a single client tenant.

    Return a Device

    1. Log in to the MSP Portal with valid credentials.
    2. Select ManageDevicesION Devices.
      Multiple regions where the MSPs can manage their client tenants is listed.
    3. Select the region from where the device needs to be allocated to the client tenant.
      The inventory of devices allocated to the MSP tenant for the region are listed in the Available for Client Allocation state.
    4. (Optional) Apply any of the following filter criteria to refine your search.
      • Search for a device with the model or serial #.
      • Select any client from the drop-down to view the devices allocated to that client.
      • Choose the state of the device from the drop-down.
    5. Return a device to Palo Alto.
      1. Select the device state as Available for Client Allocation in the MSP inventory.
      2. Select Return to Palo Alto from the ellipsis menu.
      3. Confirm return of the device to Palo Alto.
        The device returns to the Prisma SD-WAN inventory where the support admin can re-allocate the device or the customer support team can initiate the RMA process.
        Select Bulk Actions to return multiple devices to Prisma SD-WAN.

    Re-allocate a Device

    1. Log in to the MSP Portal with valid credentials.
    2. Select ManageDevicesION Devices.
      Multiple regions where the MSPs can manage their client tenants are listed.
    3. Select the region from where the device needs to be allocated to the client tenant.
      The inventory of devices allocated to the MSP tenant for the region are listed in the Available for Client Allocation state.
    4. (Optional) Apply any of the following filter criteria to refine your search.
      • Search for a device with the model or serial #.
      • Select any client from the drop-down to view the devices allocated to that client.
      • Choose the state of the device from the drop-down.
    5. Re-allocate the device to a client tenant.
      1. Select the device state To Return from the Any State drop-down.
        The device must be marked To Return by the client tenant for the MSP to re-allocate the device.
      2. Select the device from the list and click Re-allocate from the ellipsis menu.
      3. From the Re-allocate Device window, select Any Client available to the MSP.
      4. Confirm to Re-allocate the device.
        The re-allocated device is now listed in the client tenant’s inventory in an Unclaimed state.

    Revoke the Device

    1. Log in to the MSP Portal with valid credentials.
    2. Select ManageDevicesION Devices.
      Multiple regions where the MSPs can manage their client tenants is listed.
    3. Select the region from where the device needs to be allocated to the client tenant.
      The inventory of devices allocated to the MSP tenant for the region are listed in the Available for Client Allocation state.
    4. (Optional) Apply any of the following filter criteria to refine your search.
      • Search for a device with the model or serial #.
      • Select any client from the drop-down to view the devices allocated to that client.
      • Choose the state of the device from the drop-down.
    5. Revoke a Device.
      1. Select the device in the Available for Client Allocation state.
      2. Select Revoke the device from the ellipsis menu.
      3. Confirm to Revoke the device.
        The device moves to the Revoked state where the client may mark the device as Return to Prisma SD-WAN or Put device back in use.

    © 2026 Palo Alto Networks, Inc. All rights reserved.