Focus

Prisma SD-WAN Administrator’s Guide

Assign System or Custom Role

Table of Contents

Learn to assign system or custom role to an existing user.

Where Can I Use This?	What Do I Need?
Prisma SD-WAN	Active Prisma SD-WAN license

Assign a system or custom role to an existing user from the System screen.

Select ManageSystemAccess ManagementUser AccessUser Management.
Select from the available list of users to assign a role or add a new user.
Choose a Role for the user.

You may add one or more roles to the user.
Make sure to toggle to Access Allowed to grant access to the user.
Save to assign the role to the end user.

A message confirms that the role is assigned to the user.

Add tenant or device-level access to users and define user roles to use the Prisma SD-WAN Device Toolkit.

Select ManageSystemAccess ManagementDevice AccessDevice Toolkit User AccessAdd Device Access.
Enter the Login ID, Username, Password, and Confirm Password on the Add Device Access User screen.
Choose the Role of the user—Super, Read Only, or Monitor.
- Super user has read and write access to the device.
- Read Only user can only read the device information.
- Monitor user has restricted read access and can view only certain information.
On the Tenant level, switch to Yes to create tenant-level user and give the user access to all the devices.

Select No to create device-level users and give access to specific devices to the user.

You can create a maximum of 10 tenant-level toolkit users. You can create any number of device-level users, but only 40 device-level toolkit users can be assigned devices. It can be a combination of tenant or device-level users.
Save to add the user.

You can assign multiple devices to a user and configure each device with a different user role.

Select ManageSystemAccess ManagementDevice Access.
Select the user to Add device access by selecting the Edit icon against the user name.
On the Device Accessible by user, select Add Device Access.
On the available Available Devices, select the device and then select the Role for the user.

There is no restriction on the number of devices that can be added to the device-level toolkit user.
Save to add the device access to the user.