Skip to content

Commit

Permalink
[Onboarding Azure] Fix for RLP-153998
Browse files Browse the repository at this point in the history
  • Loading branch information
arane26 committed Dec 17, 2024
1 parent 96d4184 commit ee9341a
Showing 1 changed file with 3 additions and 7 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -86,19 +86,15 @@ In addition to the automated Terraform authorization method, you also have the o
. https://docs.microsoft.com/en-us/cli/azure/install-azure-cli[Install the Azure CLI] and log in to Azure.
. Download the JSON files which contains the permissions:
+
* https://redlock-public.s3.amazonaws.com/azure/azure_prisma_cloud_lp_read_only.json[Commercial]
* https://redlock-public.s3.amazonaws.com/azure/azure_prisma_cloud_read_only_role_gov.json[Government]
* https://redlock-public.s3.amazonaws.com/azure/azure_prisma_cloud_read_only_role_china.json[China]
. In your Prisma Cloud console, in the Configure Account step, click *Download Terraform Script* to download the JSON files which contain the permissions. These permissions vary depending on whether your account is Commercial, Government, or in China.
+
[NOTE]
====
Microsoft recommends using a wildcard to configure NSG flow log permissions (Microsoft.Network/networkWatchers/queryFlowLogStatus/*), listed in the JSON files. Refer to https://docs.microsoft.com/en-us/azure/network-watcher/required-rbac-permissions#nsg-flow-logs[Microsoft documentation] for more details.
====
. Open a text editor (such as Notepad) and save the custom role JSON files from the above links in the JSON format and give it a descriptive name.
. Depending on whether you are creating a custom role for the Tenant or Subscription workflow, complete the following steps:
.. Tenant Workflow: Edit the saved custom role JSON file in a text editor and update the value for AssignableScopes with the value below and save your changes:
+
[userinput]
Expand Down

0 comments on commit ee9341a

Please sign in to comment.