Palo Alto Networks IAM API

Prisma Cloud identity and access management (IAM) security provides: * Visiblity—Query all relevant IAM entities * Gonvernance—Monitor your cloud environment for overly-used permissions * Response—Automatically remediate permissions The IAM security endpoints enable you to investigate IAM data programmatically. See [Primsa Cloud IAM Security](https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-iam-security/what-is-prisma-cloud-iam-security.html) for more information. ### Error Handling Like other Prisma Cloud public API requests, the IAM security API requests return standard HTTP response codes. Unlike most other CSPM API error handling, IAM security API error responses do not include an [x-redlock-status](//prisma-cloud/api/cspm/api-errors) in the response header. ### Pagination You can control the number of items in a response for endpoints that support pagination. Use request parameter **limit** to control the maximum number of items in a response. If the response includes **data.nextPageToken**, use **data.nextPageToken** as the request parameter **pageToken** in a request for the next page of data. The following table summarizes the request parameters for pagination: Request Parameter | Description -----------| ------- **limit** | Maximum number of items to return in a page. **pageToken** | Use the **data.nextPageToken** value from the previous response object to return the next page of data.

Business capability
Identity & Access Management BC-620.20

Operations 21

POST /api/v1/permission Get Permissions #
POST /api/v1/permission/page Get Permissions Next Page #
POST /api/v1/permission/access Get Permissions Access #
POST /api/v1/permission/access/page Get Permissions Access Next Page #
POST /api/v1/permission/alert/remediation Get Remediation #
GET /api/v1/permission/alert/search Get IAM Query #
POST /api/v1/suggest Get Query Suggestions #
POST /iam/api/v3/search/permission Get Permissions V3 #
POST /iam/api/v4/search/permission Get Permissions V4 #
POST /iam/api/v3/permission/{permission-id}/list_access Get Permission Accesses V3 #
POST /iam/api/v2/suggestion Get Query Suggestions V2 #
POST /iam/api/v2/search/iam_config Get Permissions Role or Policy Definition V2 #
GET /iam/api/v2/alert/{alertId}/remediation_command Get Remediation Command #
GET /iam/api/v2/alert/{alertId}/query Get IAM Query V2 #
GET /iam/api/v1/assets/{assetId}/over-permissive-metadata Get Least Privilege Access Metadata of an Asset #
GET /iam/api/v1/assets/{assetId}/existing-least-privileged-access Get Existing Least Privilege Access Suggestions for an Asset #
GET /iam/api/v1/assets/{assetId}/custom-least-privileged-access Get New Least Privilege Access Suggestions for an Asset #
GET /iam/api/v1/resources/{resourceId}/over-permissive-metadata Get Least Privilege Access Metadata of a Resource #
GET /iam/api/v1/resources/{resourceId}/existing-least-privileged-access Get Least Privilege Access Suggestions for a Resource #
GET /iam/api/v1/resources/{resourceId}/custom-least-privileged-access Get New Least Privilege Access Suggestions for a Resource #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks-iam-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-iam-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Palo Alto Networks IAM API
  version: '1.0'
  description: 'Operations tagged IAM across 2 of this provider''s published API definitions: palo-alto-cspm-consolidated-spec-cspm-spec-openapi.json, palo-alto-cspm-iamv2microservice-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
- url: https://api.anz.prismacloud.io
- url: https://api.eu.prismacloud.io
- url: https://api2.eu.prismacloud.io
- url: https://api.gov.prismacloud.io
- url: https://api.prismacloud.cn
- url: https://api.ca.prismacloud.io
- url: https://api.sg.prismacloud.io
- url: https://api.uk.prismacloud.io
- url: https://api.ind.prismacloud.io
- url: https://api.jp.prismacloud.io
- url: https://api.fr.prismacloud.io
tags:


# --- truncated at 32 KB (94 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-iam-api-openapi.yml