Permissions to view Attack Path related Dashboard

[C.Panagiotopoulos]

Hello everyone,

My team has been assisting a customer with integrating Prisma cloud with their Azure infrastructure. Among the configuration was the creation of various dashboards, including one that is related to attack paths. Currently the only widget on this dashboard is the Runtime Burndown and Inventory which is described here Create and Manage Dashboards. The issue here is, that a number of users cannot even view this dashboard as they receive a "Permission Denied" screen. The Permission Group of the role associated with them has view permission for every setting and update permission for Reports on both Alerts and Compliance. The odd part is, that they can view all other dashboards normally. The dashboard has been shared with all users to make sure this is not a share issue.

Sadly, in the official articles, there is no definite explanation on the permissions that are associated with each of the widgets, in order to troubleshoot, at least I have not found any info.

Any information would be appreciated.

[LMegrelis]

Hello! 

The issue is that default dashboards are only available for sysadmins. 

As a workaround they can create a custom dashboard but only limited widgets will be available. This is by design. 

Documentation for reference: 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000XhZhCAK

Please let me know if you have any further questions. 

[C.Panagiotopoulos]

Hello,

I checked the article you sent, and this is an important piece of information. However, this particular dashboard was not created by Palo Alto, but by an engineer from the customer's side as noted in the created by field that appears when pressing the three dots right next to the dashboard's name. That is actually quite puzzling, since as mentioned before, all view permissions have been granted to the roles the particular users that reported it are using.

I guess, since the widget mentions the category of "Code to Cloud" this would most likely be related to compute permissions. 

Thank you again in advance.

[LMegrelis]

Hello!

Yes you are correct. Have you given compute related permissions to the user and role in question? 

If not I encourage you to open a customer support case where we could further assist you.