Prisma Cloud: How to resolve error "The Service Account Key uploaded is not valid. Please update to continue"

• Prisma Cloud
• Azure 

The following can be the root cause of the issue:

1. IAM role permissions are not assigned at root-level in Management Group in Azure portal.
2. Prisma Cloud App Client secret is expired under "Certificates & secrets"

IAM role permissions are not assigned at root-level in Management Group in Azure portal.

It's not possible by design to onboard Management Group without giving root-level permissions in Azure Portal.

Azure portal:

1.  Login Azure portal
2.  Go to Management Groups > Tenant Root Group

3. Add Access control (IAM) permissions and retry onboarding steps in the following link

Prisma Cloud App Client secret is expired under "Certificates & secrets"

1. Login Azure portal
2. Go to App registrations > Click on "All applications"
3. Type "Prisma Cloud" in Search box
4. Select Prisma Cloud app. In my case, it's "Prisma Cloud App arhww"
5. Click on Certificates & secrets 
6. Client's Secret is expired.
7. Click on "New client secret" to create a new one.
8. Copy newly created Client Secret Value and replace it on Prisma Cloud console.

1. Login to Prima Cloud > Settings > Providers > Edit Azure Cloud Account > Select "Configure Account"
2. Replace newly created Client Secret with the old one.
3. Click "Next" and then click on "Save and Close".