topic Re: Cannot update user role to another user in Cortex XDR Discussions

Cannot update user role to another user

SeanDeHarris — Tue, 18 Feb 2025 05:00:41 GMT

This is about user permssion settings, I'm already the account admin of the XDR tenant already.
Currently, the user scope is set to all, i want to change the scope for specific user.
But there is no update user permission when right click on user
does anyone share the same experience?

Re: Cannot update user role to another user

SeanDeHarris — Tue, 18 Feb 2025 05:12:38 GMT

With the permission other than "Account admin" or "Instance Admin", the scope tab is available.
I notice I cannot change the other Account Admin's permission. Posstible to change that setting?

I mean revoke or "downgrade" Account admin right for another admin?

Re: Cannot update user role to another user

aspatil — Tue, 18 Feb 2025 06:26:36 GMT

Hello @SeanDeHarris ,

Thanks for reaching out on LiveCommunity!

The user who activated the Cortex product is assigned the Account Admin role. You cannot create additional Account Admin roles in the Cortex XDR tenant. If you do not want the user to have Account Admin permission, you need to remove the Account Admin role in Cortex Gateway.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Assign-user-roles-and-groups

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.