IBM Security Join our 16,000+ members as we work together to overcome the toughest challenges of cybersecurity. Join the Community
I am looking for a list of permissions needed for the API account on the Panorama host so the Panorama App on SOAR will have access to what it needs. Currently, I get an error when testing our configuration stating the location vsys is not available via the API URL. The documentation for this app is not clear and does not state what permissions should be given to the API account.
The documentation for this app is listed here: resilient-community-apps/fn_pa_panorama at main · ibmresilient/resilient-community-apps
Any help would be greatly appreciated.
The README for the integration regarding the API permissions is shown in the second attached image.
When creating a API key on SOAR it would need the permissions shown in the first attached image.
Thank you for sharing. While this is correct information for the API key on SOAR, I need the permissions for the API account on the Panorama side so that SOAR can call the API functions on Panorama. I spoke with a SOAR architect who informed me that this app needs an update and dev is working on it.
The Panorama REST API permissions needed are Objects and Network.
Have you resolved this issue and any update when the new updated Version of Panorama app will be available on App Exchange ?
The link below will help ;
The administrator account need roles to be applied to it . see link below on how to enable API access for an administrator account ;