Prisma Cloud Compliance Module: Resource Group filter versus Cloud Account filter not applying correctly
291
Created On 07/10/23 18:31 PM - Last Modified 02/18/26 14:30 PM
Symptom
- On the Compliance over view Page. Upon applying filters for Resource Groups and only specific Cloud accounts. You are still able to see all Resource Groups thus filter for cloud accounts does not work.
- Cloud Account " GM-Azure-Main" has the resource group name "PCC AgentlessScanResourceGroup"
- Cloud Account "Mike Google Cloud Account test" does not have any resource group for Azure since this is a Google Cloud Account
- Note that this behavior is also occurs via the Asset Inventory Page.
Environment
- Prisma Cloud
- Compliance Overview Page
- Asset Inventory Page
Cause
- When creating A Resource List for a User Role. You have the option to provide which Resource Group the Resource List has access irrespective of which cloud account it belongs to.
- Here I am choosing 2 Resource group for the Resource List from 2 Different Azure Cloud account for my "GM-AccGrpRd" Role.
Resolution
This is expected behavior and by design. The Azure Resource Group and Cloud Account filter are independent and populated based on the User's Role. If this behavior needs to be changed, please reach out to your CS team to file a Feature Enhancement request.
Additional Information
Please see link for our documentation for more information on Adding a Resource List in Prisma Cloud.