User Access Consent

To view and select one of the consent options a Domain Administrator will:

1. Log into the Support Portal.
2. Navigate to Account Management > Account Details.
3. Select one of the three options under Allow Access to Palo Alto Networks Support. 

Access Definitions:

• Require Approval for each access request- The user whose access will be used may approve or a Domain Admin may approve.  Consent is required.  This is the default setting.
• Always allow support access and notify administrators for each request-  Domain Administrators will be notified of the access.  Consent is not required.
• Never allow access- Access will never be allowed.

When the Palo Alto Networks team member begins the access process, a consent request or  notification of the access will be generated to the user in question via email and the alert section of the Support Portal account.   
 

Similarly if a Domain Admin is added to the request, they will receive a consent request or notification via email and the alert.

The email will include a link to review and approve or deny the request. 

The notification alert within the CSP account will contain a similar message with a link to review and approve or deny the request.

• Access will be granted to the Palo Alto team member for 7 days.  Any extension will require a new request/notification.
• A new consent request/notification will be sent for each Palo Alto team member who needs  access or if  access is needed for an additional user in the account.
• The access request/notification applies to one Support Portal account ID.  If access is needed to a user's membership in multiple accounts, requests/notifications will be generated for that user in each of those accounts .    
• When the access has expired, or if the Palo Alto team member or customer cancels the access, a status alert will appear in the notifications section of the Support Portal indicating that the access is no longer active.