Palo Alto Networks
Collect Strata Cloud Manager
Use an IAM service account to read an SCM tenant and its available configuration.
On this page
Obtain the service-account details
Open tenant identity management
Create an IAM service account with read access to the intended SCM tenant configuration.
Record the identifiers
Copy Client ID and TSG ID.
Store the secret
Store Client Secret securely; a personal SCM login cannot replace it.
Configure the collector
| Field | Value |
|---|---|
| Collect from | Strata Cloud Manager tenant |
| TSG ID | Tenant Service Group identifier |
| Client ID | IAM service-account identifier |
| Client Secret | The service-account secret, entered locally |
| Workspace collector token | The independent ConfigProof token |
Collect the tenant
Continue, review tenant/device selections and start. Authentication uses the service-account credentials with scope tsg_id:<TSG ID>.
Optional direct firewall reads
For direct firewall reads, supply separate firewall credentials or choose Skip. Skipping sends available tenant data and leaves device-state gaps; review any analysis units requested.