Document:Prisma Cloud Compute Edition Administrator’s Guide

Access control

Filter

Access control

Establish and monitor access control measures for cloud workloads and cloud native applications.

Prisma Cloud provides broad enterprise identity support, integrating with Active Directory, OpenLDAP, Ping, Okta, Shibboleth, Azure AD, and G Suite, allowing you to implement central credential management in the Prisma Cloud Platform. Define accounts and IAM roles to integrate with your cloud providers in one place and reuse them across the product. Pluggable cryptography allows you to bring your own certificates, not just for TLS, but also for smart card authentication to Console.

Prisma Cloud ships with prebuilt roles to provide least privilege access to your devops and security teams. Use Assigned Collections to precisely control what data teams can view or use built-in multi-tenancy to securely isolate entire business units or geographies within the same Console.

Role-based access control for Docker Engine

Integrate with Active Directory

Integrate with OpenLDAP

Integrate with SAML

Integrate Google G Suite (SAML)

Integrate with Azure Active Directory via SAML 2.0 Federation

Integrate with PingFederate via SAML 2.0 Federation

Integrate with Windows Server 2016 & 2012r2 Active Directory Federation Services via SAML 2.0 Federation

Non-default UPN suffixes

Compute user roles

Assign roles

Use custom certificates for authorization