Assign Roles to Manage Cloud Services

To assign roles to or create other users in the Customer Support Portal, you must be assigned the Super User role.
To activate cloud services such as Traps management service from the Cortex Hub, you must have an account in the Customer Support Portal and a valid authentication (Auth) code. However, to access the service either directly using the Traps management service URL or from the Cortex Hub, you must be assigned the corresponding service role from the Customer Support Portal. When you log in to the Cortex Hub, you see tiles for all services associated with your user account.
After activating a service, the tile can briefly appear on your Cloud Services Portal but is subsequently removed unless you have the associated service role.
The following table describes the roles:
Super User
Required to assign roles and create users in the Customer Support Portal.
Provides access to the Traps management service where you can manage and protect your endpoints from malware and software exploits.
Directory Sync Service
Directory Sync is an optional service that reads Active Directory information on a customer's network, and sends it to the Palo Alto Networks cloud so that apps can access it for reporting and analytics purposes. You must have this role to set up the Directory Sync Service.
Cortex Data Lake
Cortex Data Lake enables the storage and query of logging data. Logging data can be either network logs as written by firewalls, or logs written by apps and services such as the Traps management service. Assign this role if the administrator must configure the Cortex Data Lake, manage logging quotas for Traps management service, or configure log forwarding using the Log Forwarding app.
To assign roles from the Customer Support Portal:
  1. Log in to the Customer Support Portal ( and select MembersManage Users.
  2. Locate or search for users for which you want to enable access to the Traps management service and other services. Or, if the user does not already exist, Add Member.
  3. Click the edit icon in the Actions column for the user.
  4. Click in to the Roles cell and select the desired roles one at a time depending on the role of the user.
  5. Click the check mark in the Actions column when finished.
  6. Next steps...

Related Documentation