Authenticate Cortex Xpanse users when using the Customer Support portal.
When you add users to the CSP account, they are added as users in the Cortex Gateway and the tenant. The Cortex Gateway is a centralized portal for managing users, roles, and tenants. By default, users have access to the Cortex Gateway, but cannot make any changes in the Cortex Gateway unless they are Account Admins and cannot access a tenant until they are assigned a role or group role.
Note
You must be assigned the Super User role in the CSP to add users in the CSP.
A Super User is automatically granted the Account Admin role, which enables them to manage tenants, users, and roles in the Cortex Gateway.
When users log into the Cortex Gateway or the tenant (provided they are assigned a role) they are prompted to sign into the CSP using their username and password. This is the default method of authentication.
Note
As soon as users are added to the CSP, you can manage users, roles, and user groups in the Cortex Gateway or in the Cortex Xpanse tenant. We recommend managing roles and user groups in the tenant as you may want different roles and user groups for each tenant.
Add users to your CSP account, by logging into https://support.paloaltonetworks.com/ and doing one of the following:
Create a new Customer Support User Account.
On the left-hand side menu, select → .
Add the member details and click .
An email is sent to the user which must be accepted within seven days.
For more detailed information including how to reset the invitation, see How a Super User Creates a New Customer Support Portal User Account.
Send an Account Registration Link.
A registration link can be generated by a Support Portal account Super User and shared with users who need to create a login for access to the account.
On the left-hand side menu, select → , and click the User Access tab.
In the Account Registration link, click Create.
Copy and paste the link to the users you want to add.
When clicking the link, users are required to enter their registration details and submit them to the CSP.
After users have submitted their details, the super user receives a notification that a user has been created.
For more information about how to generate, regenerate, or disable a link, see How to Use the Account Registration Link.
Log into The Cortex Gateway.
You can view the users in your account by selecting → . You should see the following users:
Account Admin Users
CSP Super Users automatically have Account Admin permission. These users can view and make any changes in the Cortex Gateway.
Users with No-Role
These users cannot log into the tenant until either you assign them to a tenant, or you create a role or user group role in the Cortex Gateway or in the tenant.
When users log into the Cortex Gateway or the tenant directly, they are required to sign into the CSP using a username and password. For more detailed information about how to create users in the CSP, see How a Super User Creates a New Customer Support Portal User Account.