topic Prisma cloud API access key permissions in Prisma Cloud Discussions

Prisma cloud API access key permissions

ssublue — Fri, 28 Nov 2025 07:14:34 GMT

Hi I have aquestion for Prisma cloud's API access key.

Quoted from docs, when generating access key, it's tied to current login user's Role.

https://docs.prismacloud.io/en/enterprise-edition/content-collections/administration/create-access-keys

I tried some test to see if it works.

I made a role that do not have access to view, update, delete access keys.

After switching to that role, i expected that I cannot see access key menu.

But I could view, create, delete access key.

Is this an expected symptom?

Re: Prisma cloud API access key permissions

JCalloway1 — Mon, 01 Dec 2025 14:57:08 GMT

Hello!

Would you be willing to include a screen shot of the permission group used for the role you are using? Also, (and I know this sounds trivial) but can you please verify that the permission group you created is actually associated with the role you tested?

Thanks!

Re: Prisma cloud API access key permissions

ssublue — Mon, 01 Dec 2025 18:03:45 GMT

Hello, nice to meet you.

I didn't permitted access key permissions to my test role. So there are just view permissions with dashboards, inventories, investigating(RQL) etc.

And also created access key role with my test role.

I just discovered by running few more tests.

1. Access key permissions are for read,write access to "other user's access key".

2. Can view, create, delete, update(to update a role, permission, related permissions are needed) access keys that are self-generated.

-> I guess it's for managing purpose. As you know access keys are mapped with current login roles.

Any corrections or further details about access key permissions are welcomed!

Thank you for adding comments btw!