Consent Based Account Linking FAQ

Consent Based Account Linking FAQ

32104
Created On 03/09/20 19:20 PM - Last Modified 03/01/24 07:57 AM


Question


This article addresses the Frequently Asked Questions (FAQ) on Consent Based Account Linking
  •  What is account linking? (What is it used for?)
  • How do I get the Domain Administrator role?
  • Who can request, approve, and decline accounting link?
  • What can I do once an account is linked to me?
  • How do I link accounts?
  • How do I cancel the account link request?
  • How do I approve a link?
  • How do I stop accounting linking?
  • How do I know a link request is made to my account?
  • How do I view the history of each account linking request?
  • How will I know who is the Domain Administrator of an account?


Environment


Customer Support Portal (CSP)
AutoFocus


Answer


What is account linking? (What is it used for?)
Account linking allows Account 1 to request to link to Account 2.  Once approved, Account 1 will have access to Account 2. The linking is one directional, meaning Account 1 will have access to Account 2, but  Account 2 will not have access to Account 1.  The Domain Administrator role within Account 1 will  send a request to a domain administrator for Account 2. . Once the request has been approved all users in Account 1 (regardless of their role in Account 1) will be able to access Account 2 based on the role assigned by the domain administrator in Account 2 at the time of request approval. If Account 1 initiated the linking to more accounts, then the user in Account 1 will have access to all the linked accounts regardless of his role in Account 1. In future releases, account linking will allow access to another account's Wildfire, Autofocus and Prisma and Cortex products . 

How do I get the Domain Administrator role?
For existing accounts, users that have a combination of super user plus account admin (Role Based Access Control) will automatically obtain Domain Administrator.

For new accounts, the first registered user in the account will automatically be assigned super user plus account admin which will result in Domain Administrator Existing Domain Administrators can assign another member within the account the Domain Administrator role

Who can request, approve, and decline accounting link?
Only the members within the Requesting and Consenting accounts with Domain Administrator roles will be able to manage accounting linking. Account linking management includes the capability to send, approve/reject, and cancel requests. It also includes unlinking accounts and managing roles of linked accounts.

What can I do once an account is linked to me?
Once an account is linked, you will be able to see the account under the Account Switcher on the top Navigation and privileges based on the role granted to you. Note: Access to Case management is not available at this time through the account linking feature.

How do I link accounts?
Under the Account Management section, click on Manage Linked Accounts in the left navigation. Then click on + Request Account Link button:


On the Request Account Link page, enter Requester's Email Address and Account ID, then click the Confirm Request button:

 
How do I cancel the account link request?
Once the request is submitted to link accounts and while the request in the “Requested” status, on the Link Request tab, use the Cancel Request button to cancel the request:
 


How do I approve a link?
From the Requestee account, go to Manage Linked Accounts > click Link Approvals tab > under the Actions section > click the Review button:
 

On Review Account Linking Request page, you will be able to just confirm the linking between the accounts by clicking on the Confirm button. You also have the ability to select the role(s) you want to assign to Requestor’s account by selecting the roles in the Assign Account Roles area:
 

For more information about roles, see the Support Portal User Role Matrix

If you have decided to just approve the linkage of the accounts then on the Link Approval tab, you can the select roles by clicking on the edit button under the Roles column next to the name of the account
 


How do I stop accounting linking?
Once an account link is established, both the Requestor or the Requestee can remove the account linking. If you are the Requestor of the account linking, you can unlink the accounts by going to the Link Request tab.
 

On the Confirm Unlink Account popup message, click OK to complete the unlinking:
 

If you are the Requestee, go to the Linked Approval tab > find the Requestee Account to stop linking > click the Unlink button:
 

On the Confirm Unlink Account popup message, click OK to complete the unlinking:
 

The Requestor Account will now have status of Revoked:
 


How do I know a link request is made to my account?
The domain administrator will receive email notification and will also be notified in the notification bell when logging into their Customer Support Portal (CSP).

How do I view the history of each account linking request?
Users can view the history in both Link Requests and Link Approvals tabs. By clicking on the View More Info button within both tabs, users will see the following info:

Requestor section:
  • Account Name
  • User Name
  • Email
  • Account number
Requestee section:
  • Account Name
  • User Name
  • Email
  • Approval Account Number
Request History:
  • Name
  • User Email
  • Action
  • Date and Time of Action
  • Assigned Roles

How will I know who is the Domain Administrator of an account?
To obtain the Domain Administrators details, reach out the super user of the account you would like to be linked with.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POycCAG&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language