Assign a Batch of Predefined Roles to Tenant Users or Service
Accounts Through the Prisma SASE Multitenant
Cloud Management Platform
Prisma SASE Multitenant
Cloud Management Platform
Learn how to assign roles to tenant users or service
accounts in the
Prisma SASE Multitenant
Cloud Management Platform
.Before you can assign a role to a user for
the first time, you must add user access.
Adding a role to a service account is optional. If you already added
users or service accounts and you want to assign additional roles,
use the following steps.
When you add user access or add a service account,
you can assign a predefined
role at that time. You can also assign additional roles to
users or service accounts afterward, either individually or in batches.
- Go to the hub and log in.
- SelectSASE Portal.
- SelectMultitenant Portal.
- SelectIdentity & Access/Access Management.
- Select the tenant where the user or service account is located.
- Select the users or service accounts for which you want to assign a role.
- Assign Roles.
- Select an option fromApps & Services. For example, you can selectPrisma Access.
- Select aRole. For example, you can selectRead-Only Adminfor a user who needs only view access to Prisma Access. Review About Roles and Permissions in the Prisma SASE Multitenant Cloud Management Platform for more information about other roles.Any role assigned to a user or service account at the parent level of the hierarchy is inherited by that user at the child level by default.
- (Optional)Add Anotherapp, service, or role and repeat as needed.
