A user from an organization is unable to log in to Prisma Cloud Console after having logged in the previous day. Which area on the Console will provide input on this issue?

The Audit Logs in the Prisma Cloud Console provide a chronological record of events and actions performed by users and the system. When a user is unable to log in, the Audit Logs are the primary source for investigation. They capture detailed information about both successful and failed login attempts, including the source IP address, the user agent, and, most importantly, the reason for the failure (e.g., "Invalid credentials," "User disabled," "SSO authentication failed"). An administrator can filter these logs by the affected username to quickly diagnose the root cause of the login issue.

A. SSO: This is a configuration page. While an SSO misconfiguration could be the cause, this page will not show the specific log entry for the user's failed attempt.
C. Users & Groups: This area shows the user's current status and role assignments but does not provide a real-time log or reason for a specific login failure.
D. Access Control: This section is for managing roles, permissions, and access keys. It is used for configuration, not for viewing event logs like login failures.

1. Palo Alto Networks Prisma Cloud Administrator's Guide. "View Audit Logs". The documentation states, "Prisma Cloud enables you to view audit logs for all administrative and user activity... Use the audit logs to monitor login activity... and to troubleshoot issues."

2. Palo Alto Networks Prisma Cloud Administrator's Guide. "Investigate User Activity". This section describes using audit logs to trace user actions, which includes analyzing login events to determine the cause of access problems.