Strata Cloud Manager RBAC Roles for Prisma AIRS AI Runtime Security
Role-Based Access Control (RBAC) in Strata Cloud Manager now allows you to enforce granular permissions for the Prisma AIRS AI Runtime APIs. For a comprehensive overview of Strata Cloud Manager roles, refer to the Roles Overview document.
The primary roles relevant to Prisma AIRS AI Runtime API are:
User Role | Permission |
---|---|
Superuser | Has full access to all API endpoints, including the ability to perform CRUD (Create, Read, Update, Delete) operations on API keys, security profiles, and custom topics. |
View Only Administrator | Provides read-only access to entities like security profiles, API keys, and custom applications. |
CUSTOM ROLES: (custom-role-name) | Allows administrators to define a custom role with specific permissions. You can assign granular permissions for Prisma AIRS AI Runtime APIs by selecting from a list of permissions such as airs_api.ai_sec_profile , airs_api.api_keys , airs_api.custom_topic , and more. Create a custom role with specific permissions for each entity, allowing you to assign granular CRUD (Create, Read, Update, Delete) operations. Note: These custom roles are specifically for managing Prisma AIRS resources through management APIs, not the Strata Cloud Manager web interface. To create a custom role: * Navigate to Strata Cloud Manager > Identity & Access > Roles > Custom Roles. * Select Add Custom Role, and then select the API tab. Select the permissions for the AI Runtime Security API endpoints and the CRUD operations for each. ![]() ![]() |