Unable to provision Cloud Secure Web Gateway from Enterprise tenant
Article ID: 398526
Updated On:
Products
Issue/Introduction
Customer purchased Network protection and ZTNA licenses.
Logging into the Enterprise portal, admin is unable to configure the Network Protection, and ZTNA services as its greyed out as shown below:
Does the admin need special permissions to configure or provision these services?
Environment
Cloud Enterprise Console.
Cloud SWG.
Cause
New Cloud SWG (or SAC for ZTNA) super administrator role must be assigned to the administrators trying to configure the service.
Resolution
Make sure the Cloud SWG administrators are assigned the Cloud SWG super administrator role - without this, the admin user will not be able to configure/provision the initial tenant.
The Cloud Enterprise admin can assign these roles to individuals within the enterprise.
Additional Information
More granular super admin roles such as that for Cloud SWG/ZTNA are relatively new.
The Product Super Administrator is a role that is given to the Technical Contact associated with the purchase of a product subscription.
This role is assigned per product family and extends across environments. The Product Super Admin can do the following tasks:
- View environments and subscriptions
- Configure subscriptions and create environments for the product
- Login and manage product instances (currently: Cloud SWG, CloudSOC, and Endpoint only)
- Assign additional Product Super Admins for the product
- Assign other admin roles for the product
- View the list of administrators for the product
Feedback
