Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Workload Protection Platform (CWPP)Medium
A security team is implementing access control for Prisma Cloud users. They need to assign a role that allows a user to view all compliance reports and vulnerability scan results but prevents them from making any changes to policies or deploying Defenders. Which built-in Prisma Cloud role best fits these requirements?
- AOperator
- BDeveloper
- CAuditor
- DAdministrator
Show answer & explanationAnswer & explanation
Correct answer: C. Auditor
The Auditor role in Prisma Cloud is specifically designed for users who need read-only access to security posture, compliance reports, and vulnerability data across the environment, without the ability to modify configurations or deploy resources.
Why the other options are wrong
- A. Operator typically has permissions to deploy and manage Defenders and respond to incidents, including some write actions.
- B. Developer roles usually focus on integrating security into CI/CD, not just viewing reports.
- D. Administrator has full read/write access and can make changes.
Prisma Cloud Built-In Roles
Pre-defined roles in Prisma Cloud that provide different levels of access and permissions to various features and data.
- Simplifies access management.
- Follows principle of least privilege.
- Includes roles like Administrator, Auditor, Operator.
Memory trick: Each role in Prisma Cloud has a specific job to do.