How to remove a shared snippet published to a Subscriber tenant in Strata Cloud Manager (SCM)?
430
Created On 10/22/25 07:57 AM - Last Modified 03/13/26 03:23 AM
Objective
- When publishing a shared snippet from a publisher tenant to a Subscriber tenant, the snippets show under Predefined Snippets in a subscriber tenant.
- When inherited from a Publisher tenant, shared snippets associated with folders or firewalls can only be cloned and can't be deleted in the Subscriber Tenant.
- The steps listed below allows deletion of the inherited/shared snippets from Publisher Tenant.
Environment
- Strata Cloud Manager (SCM)
- Snippets
Procedure
- Login to Strata Cloud Manager
- Navigate to Configuration> NGFW and Prisma Access> Configuration Scope> Snippet> Select the Snippet
- In the Selected Snippet> under Subscriber Tenants, click on the tenant name to Edit and uncheck the "Do not delete from Subscriber tenant" option.
The "Do not delete from Subscriber tenant option" is checked by default.- When this option is checked, snippets cannot be deleted from the Subscriber, even without associations.
- When unchecked, snippets without folder associations can be deleted from the Subscriber. Deleting the Subscriber will not remove the snippets.
- In the Selected Snippet page> Overview> under Snippet Associations. Remove all the folders or firewall associations with this Snippet
- Navigate to Configuration> NGFW and Prisma Access> Overview> Trusted Tenants for Snippet Sharing
- Select Either Publisher Tenant or Subscriber Tenant and click on the tenant name from which you want to remove the association.
- Select "Delete the Trust"
- Once deleted, the snippet will no longer be associated with the firewall or folder and becomes a local snippet.
Note:
- Do not remove the shared snippet directly without deleting the trust.
- This will result in leaving behind the shared snippet under Predefined snippets in a Subscriber Tenant.
- The predefined snippets cannot be deleted even with super user account.
Additional Information
N/A