What are two built-in RBAC permission groups for Prisma Cloud? (Choose two.)

Prisma Cloud utilizes Role-Based Access Control (RBAC) with several built-in permission groups (roles) to streamline access management. Among these default roles are "Account Group Admin" and "Account Group Read Only." The "Account Group Admin" role grants full administrative permissions for all resources within assigned account groups, while the "Account Group Read Only" role provides view-only access to the resources within those same account groups.

A. "Group Membership Admin" is not a standard, built-in permission group in Prisma Cloud. User and group management is typically handled by the "Identity and Access Admin" role.
B. "Group Admin" is an incorrect and generic name. The correctly named built-in role for managing resources within a group is "Account Group Admin."

Palo Alto Networks. (2023). Prisma Cloud Administrator's Guide (SaaS). "Settings > Roles" and "Prisma Cloud Default Roles". This section provides a comprehensive list of all built-in permission groups, explicitly including "Account Group Admin" and "Account Group Read Only".