Prisma cloud API access key permissions

[ssublue]

Hi I have aquestion for Prisma cloud's API access key.

Quoted from docs, when generating access key, it's tied to current login user's Role. 

https://docs.prismacloud.io/en/enterprise-edition/content-collections/administration/create-access-k...

I tried some test to see if it works.

I made a role that do not have access to view, update, delete access keys.

After switching to that role, i expected that I cannot see access key menu.

But I could view, create, delete access key.

Is this an expected symptom?

[JCalloway1]

Hello!

Would you be willing to include a screen shot of the permission group used for the role you are using?  Also, (and I know this sounds trivial) but can you please verify that the permission group you created is actually associated with the role you tested?

Thanks!

[ssublue]

Hello, nice to meet you. 

I didn't permitted access key permissions to my test role. So there are just view permissions with dashboards, inventories, investigating(RQL) etc.

And also created access key role with my test role.

I just discovered by running few more tests.

1. Access key permissions are for read,write access to "other user's access key".

2. Can view, create, delete, update(to update a role, permission, related permissions are needed) access keys that are self-generated.

-> I guess it's for managing purpose. As you know access keys are mapped with current login roles.

Any corrections or further details about access key permissions are welcomed!

Thank you for adding comments btw!