Palo Alto Networks User Profile API
Manage your Prisma Cloud user profiles.
Operations 14
Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay
Ask an LLM
“What does my own Prisma Cloud profile say about me, like my roles and time zone?”
“Where can I check the personal details on the account I'm signed in with?”
Tell an agent
Show me my own user profile.
Look up the profile of the account I'm logged in as.
Ask an LLM
“Can I change my own name or time zone without an admin?”
“How do I switch my default role on my own profile?”
Tell an agent
Change my own profile's time zone to {timeZone}.
Update my name on my profile to {firstName} {lastName}.
Ask an LLM
“Which users and service accounts exist in my tenant?”
“Can I see service accounts alongside human users in one list?”
Tell an agent
List every user and service account in my tenant.
Show all service accounts and users using the v3 user list.
Ask an LLM
“How do I create a service account for automation instead of a person?”
“Can I give a new account an access key expiration when I add it?”
Tell an agent
Add a service account named {username} with role {defaultRoleId}.
Create a user account of type {type} for {email}.
Ask an LLM
“Which users belong to my tenant and what roles does each hold?”
“Is there an older list of users that shows multiple roles per person?”
Tell an agent
List all tenant users with their assigned roles using the v2 endpoint.
Show every user and their multiple roles from the v2 user list.
Ask an LLM
“How do I add a new admin who needs more than one role?”
“What's required to create an administrative user through the v2 endpoint?”
Tell an agent
Add admin {email} named {firstName} {lastName} with roles {roleIds} via v2.
Create a v2 administrative user {email} in time zone {timeZone}.
Ask an LLM
“What roles and settings does a specific user have?”
“Can I look up one admin's profile by their email?”
Tell an agent
Get the user profile for {email}.
Show the roles assigned to user {email}.
Ask an LLM
“Can I change another admin's roles or time zone?”
“How do I rename a user in the tenant?”
Tell an agent
Update user {email}'s roles to {roleIds}.
Change the time zone of user {email} to {timeZone}.
Ask an LLM
“How do I permanently remove someone's account from the tenant?”
“Can I delete a service account I no longer use?”
Tell an agent destructive · confirm first
Delete user profile {id}.
Remove the service account {id} from my tenant.
Ask an LLM
“Can I lock a user out temporarily without deleting them?”
“How do I re-enable an account that was disabled?”
Tell an agent
Disable user {id} by setting status {enabled}.
Set the enabled status of user {id} to {enabled}.
Ask an LLM
“What email addresses do my active users sign in with?”
“Is there a quick list of just the emails of non-deleted users?”
Tell an agent
List the emails of all active users.
Give me every user email in the system.
Ask an LLM
“Which email domains are on the allow list for new users?”
“What domains can user accounts be created under?”
Tell an agent
List the allow-listed email domains.
Show which email domains my tenant permits.
Ask an LLM
“Who can still sign in with a password even though SSO is on?”
“Which users are allowed to log in through both SAML and username and password?”
Tell an agent
List the users who can bypass SSO.
Show me the SSO bypass allow list.
Ask an LLM
“How do I let a break-glass admin log in with a password when SAML is enforced?”
“Can I change the list of people allowed to skip single sign-on?”
Tell an agent
Replace the SSO bypass list so the given emails can log in with SAML or a password.
Update the users allowed to bypass single sign-on.