Focus

Common Services: License Activation, Subscription, & Tenant Management

Allocate Licenses for Cloud Managed Prisma Access and Add-Ons Through Common Services

Table of Contents

Allocate Licenses for Cloud Managed `Prisma Access` and Add-Ons Through Common Services

Learn how to allocate licenses for your Prisma Access (Managed by Strata Cloud Manager) tenants through Common Services.

Where Can I Use This?	What Do I Need?
Tenant or Tenant Service Group (TSG) Commercial or FedRAMP Moderate deployments. Not FedRAMP High "In Process" deployments, which follow a different procedure.	`Prisma Access` license with optional add-ons Activation link `Strata Logging Service` Role: Multitenant Superuser or Superuser with access to the Customer Support Portal

After you activate a license, continue to allocate licenses. You can purchase Prisma Access with a Combination SKU of Mobile User + Remote Network or as individual Remote Network and Mobile User SKUs. During activation of a Combination SKU, you must allocate to each tenant with equal quantities of Mobile User capacity and Remote Network capacity.

Supported examples: If the license is a combination SKU quantity of 1000, you can create two tenants with the following capacity:

Tenant One — 500 Mobile Users and 500 Mbps Remote Network
Tenant Two — 500 Mobile Users and 500 Mbps Remote Network

Unsupported examples: If the license is a combination Mobile Users + Remote Networks SKU of 1000 units:

Tenant One — 500 Mobile Users and 200 Mbps Remote Network
Tenant Two — 200 Mobile Users and 500 Mbps Remote Network
Tenant Three — 300 Mobile Users
Tenant Four — 300 Remote Networks

If you need Mobile Users only, Remote Networks only, or unequal quantities of Mobile Users and Remote Networks, you need to purchase Mobile-Users-only and Remote-Networks-only SKUs separately.

Select the Region storage location for the data logs, known as Strata Logging Service. Further information about supported regions.

There is no cross-region aggregation. Make sure that all your tenants are in the same region for monitoring purposes.
Assign Mobile User and Remote Network licenses to the recipient tenant.
1. Allocate licenses per number of mobile users.
  Each tenant can accept only one type of Prisma Access license, such as: Enterprise, Business Premium, or Business. One tenant can't contain a mix of different Prisma Access licenses.
  The maximum number of users available for your first tenant is based on your Prisma Access license quantity.
  The number of users available for other tenants is based on the remainder after allocation.
  Based on your license, you need a minimum capacity to share with another tenant. For example, Prisma Access local edition requires a minimum of 200 licenses that need to be allocated whether it's a root tenant or a child tenant, but Prisma Access global or worldwide edition requires a minimum of 1,000 licenses that need to be allocated whether it's a root tenant or a child tenant.
  If you have a license that is a combination of MU+RN together, you can’t split it into different tenants. For example, a 200 MU+RN local edition license still needs to be split as minimum 200 MU+RN in each tenant. You can’t have 200 MU in one tenant and 200 RN in another tenant.
  Secure mobile users with Prisma Access.
2. Allocate licenses per bandwidth of remote networks.
  Each tenant can accept only one type of Prisma Access license, such as: Enterprise, Business Premium, or Business. One tenant can't contain a mix of different Prisma Access licenses.
  The maximum amount of bandwidth available for your first tenant is based on your Prisma Access license quantity.
  The amount of bandwidth available for other tenants is based on the remainder after allocation.
  Based on your license, you need a minimum capacity to share with another tenant. For example, a Prisma Access local edition requires 200 Mbps that need to be allocated whether it's a root tenant or a child tenant, but a Prisma Access global or worldwide requires min of 1,000 Mbps that need to be allocated whether it's a root tenant or a child tenant.
  If you have a license that is a combination of MU+RN together, you can’t split it into different tenants. For example, a 200 MU+RN local edition license still needs to be split as minimum 200 MU+RN in each tenant. You can’t have 200 MU in one tenant and 200 RN in another tenant.
  Secure remote networks with Prisma Access.
  
  Continue to plan service connections.

Return Visit License Activation

Plan Service Connections for Cloud-managed Prisma Access and Add-ons