Why does accessing Runtime Security show “Authentication denied. The role must be assigned to at least one account group with one or more cloud accounts that are onboarded to Prisma Cloud.”?

Why does accessing Runtime Security show “Authentication denied. The role must be assigned to at least one account group with one or more cloud accounts that are onboarded to Prisma Cloud.”?

149
Created On 06/25/25 04:26 AM - Last Modified 07/30/26 15:41 PM


Question


Why does accessing Runtime Security show “Authentication denied. The role must be assigned to at least one account group with one or more cloud accounts that are onboarded to Prisma Cloud.”?



Environment


  • Prisma Cloud Compute
  • Prisma Cloud Runtime Security


Answer


The error message is expected; it is due to there being no onboarded cloud accounts in the account group that was assigned to the current user's role. If there is no available onboard cloud account in the tenant, you could type the "Account IDs" as string(Or “*”) in the Non-Onboarded Account IDs field by creating a custom account group. Then, assign this account group to the user’s role.



Additional Information


Reference:
- Assign Roles



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000k9sxKAA&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail