Why cant I see any account group when using a role that has "Account and Cloud Provisioning Admin" set of permissions?

Why cant I see any account group when using a role that has "Account and Cloud Provisioning Admin" set of permissions?

1959
Created On 07/24/24 14:20 PM - Last Modified 07/24/24 14:21 PM


Question


Why cant I see any account group when using a role that has "Account and Cloud Provisioning Admin" set of permissions?

Environment


Prisma Cloud Enterprise

Answer


When creating any role, but specifically for the "Account and Cloud Provisioning Admin" one needs to select the Account Groups the Role is authorized to use but also see. If not specified, users with this role won't even be able to see any Account Group and API calls using a set of credentials based on this role won't either.

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000Tp1fCAC&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language