Prisma Cloud utilizes a Role-Based Access Control (RBAC) model with several predefined roles. The 'Auditor' role is designed for compliance and oversight, granting read-only access to all platform resources, including security policies. The 'Dev SecOps' role is intended for developers and security engineers who need visibility into the security posture related to their applications. This role also includes read-only access to policies, alerts, and asset inventory to understand the security requirements and findings that impact their development lifecycle.

A. Build AND Deploy Security: While this role also has read-only access to policies, the 'Auditor' and 'Dev SecOps' roles represent more distinct and primary functions for policy review in compliance and development contexts, making them the best fit.

D. Defender Manager: This role is specifically scoped to manage the lifecycle of Prisma Cloud Defenders (agents) and does not include permissions to view or manage security policies.

1. Palo Alto Networks

"Prisma Cloud Administrator's Guide"

Section: "Prisma Cloud Administrator Roles". The guide details the permissions for predefined roles

stating that "Auditor" has "Read-only access to all resources" and "Dev SecOps" has "Read-only access to policies

alerts

and asset inventory".