Prisma Access Browser API

openapi: 3.1.0
info:
  title: Palo Alto Networks Prisma Access Browser Management API
  description: >-
    Prisma Access Browser Management API for enterprise browser security.
    Provides programmatic control over browser security policies, user
    sessions, deployment configurations, managed device inventory, and
    usage reporting. The Prisma Access Browser is a Chromium-based enterprise
    browser with built-in security controls including data loss prevention,
    threat protection, and access control. Requires Super User or View-Only
    Admin role within the SASE platform.
  version: '1.0'
  contact:
    name: Palo Alto Networks Developer Support
    url: https://pan.dev/
  license:
    name: Proprietary
    url: https://www.paloaltonetworks.com/legal
servers:
- url: https://api.sase.paloaltonetworks.com/browser-mgmt
  description: SASE Prisma Access Browser Management API production server.
security:
- oauth2Bearer: []
tags:
- name: Deployments
  description: Browser deployment configuration management.
- name: Devices
  description: Managed device inventory.
- name: Policies
  description: Browser security policy management.
- name: Reports
  description: Usage and activity reporting.
- name: Users
  description: Browser user management and session visibility.
paths:
  /v1/policies:
    get:
      operationId: listBrowserPolicies
      summary: Palo Alto Networks List Browser Security Policies
      description: >-
        Returns the list of browser security policies configured for the
        tenant. Policies control browser behavior including allowed websites,
        DLP rules, extension permissions, download controls, and clipboard
        restrictions.
      tags:
      - Policies
      parameters:
      - name: enabled
        in: query
        description: Filter policies by enabled state.
        schema:
          type: boolean
        example: true
      - name: offset
        in: query
        description: Number of results to skip for pagination.
        schema:
          type: integer
          default: 0
        example: 0
      - name: limit
        in: query
        description: Maximum number of policies to return.
        schema:
          type: integer
          default: 50
          maximum: 200
        example: 50
      responses:
        '200':
          description: Browser security policies returned.
          content:
            application/json:
              schema:
                type: object
                properties:
                  total:
                    type: integer
                  offset:
                    type: integer
                  limit:
                    type: integer
                  items:
                    type: array
                    items:
                      $ref: '#/components/schemas/BrowserPolicy'
              examples:
                ListBrowserPolicies200Example:
                  summary: Default listBrowserPolicies 200 response
                  x-microcks-default: true
                  value:
                    total: 299
                    offset: 512
                    limit: 881
                    items:
                    - policy_id: '762727'
                      name: Staging Gateway 02
                      description: Blocked suspicious policy network configured on blocked.
                      enabled: false
                      web_filtering: &id001
                        enabled: true
                        blocked_categories:
                        - example-blocked_categories_item
                        - example-blocked_categories_item
                      dlp_enabled: true
                      extension_policy: block_all
                      download_control: scan
                      created_at: '2025-06-14T10:46:06Z'
                      updated_at: '2025-10-12T19:10:58Z'
                    - policy_id: '762727'
                      name: Staging Gateway 02
                      description: Blocked suspicious policy network configured on blocked.
                      enabled: false
                      web_filtering: *id001
                      dlp_enabled: true
                      extension_policy: block_all
                      download_control: scan
                      created_at: '2025-06-14T10:46:06Z'
                      updated_at: '2025-10-12T19:10:58Z'
        '400':
          description: Invalid query parameters.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                ListBrowserPolicies400Example:
                  summary: Default listBrowserPolicies 400 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '401':
          description: Invalid or missing Bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                ListBrowserPolicies401Example:
                  summary: Default listBrowserPolicies 401 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '403':
          description: Insufficient permissions. Requires Super User or View-Only Admin role.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                ListBrowserPolicies403Example:
                  summary: Default listBrowserPolicies 403 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                ListBrowserPolicies500Example:
                  summary: Default listBrowserPolicies 500 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
    post:
      operationId: createBrowserPolicy
      summary: Palo Alto Networks Create Browser Security Policy
      description: >-
        Creates a new browser security policy. Policies define security
        controls applied to users of the Prisma Access Browser including
        web filtering, DLP, and extension management settings.
      tags:
      - Policies
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BrowserPolicyRequest'
            examples:
              CreateBrowserPolicyRequestExample:
                summary: Default createBrowserPolicy request
                x-microcks-default: true
                value:
                  name: Primary Sensor 04
                  description: Incident rule applied configured on network incident detected activity.
                  enabled: true
                  web_filtering: &id002
                    enabled: false
                    blocked_categories:
                    - example-blocked_categories_item
                    - example-blocked_categories_item
                  dlp_enabled: false
                  extension_policy: allow_all
                  download_control: allow
      responses:
        '201':
          description: Browser policy created successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BrowserPolicy'
              examples:
                CreateBrowserPolicy201Example:
                  summary: Default createBrowserPolicy 201 response
                  x-microcks-default: true
                  value:
                    policy_id: '762727'
                    name: Staging Gateway 02
                    description: Blocked suspicious policy network configured on blocked.
                    enabled: false
                    web_filtering: *id001
                    dlp_enabled: true
                    extension_policy: block_all
                    download_control: scan
                    created_at: '2025-06-14T10:46:06Z'
                    updated_at: '2025-10-12T19:10:58Z'
        '400':
          description: Invalid request body.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                CreateBrowserPolicy400Example:
                  summary: Default createBrowserPolicy 400 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '401':
          description: Invalid or missing Bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                CreateBrowserPolicy401Example:
                  summary: Default createBrowserPolicy 401 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '403':
          description: Insufficient permissions. Requires Super User role.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                CreateBrowserPolicy403Example:
                  summary: Default createBrowserPolicy 403 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                CreateBrowserPolicy500Example:
                  summary: Default createBrowserPolicy 500 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /v1/policies/{policy_id}:
    get:
      operationId: getBrowserPolicy
      summary: Palo Alto Networks Get Browser Security Policy
      description: Returns full details for a specific browser security policy.
      tags:
      - Policies
      parameters:
      - name: policy_id
        in: path
        required: true
        description: Unique identifier of the browser policy.
        schema:
          type: string
        example: '273495'
      responses:
        '200':
          description: Browser policy details returned.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BrowserPolicy'
              examples:
                GetBrowserPolicy200Example:
                  summary: Default getBrowserPolicy 200 response
                  x-microcks-default: true
                  value:
                    policy_id: '762727'
                    name: Staging Gateway 02
                    description: Blocked suspicious policy network configured on blocked.
                    enabled: false
                    web_filtering: *id001
                    dlp_enabled: true
                    extension_policy: block_all
                    download_control: scan
                    created_at: '2025-06-14T10:46:06Z'
                    updated_at: '2025-10-12T19:10:58Z'
        '401':
          description: Invalid or missing Bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                GetBrowserPolicy401Example:
                  summary: Default getBrowserPolicy 401 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '403':
          description: Insufficient permissions.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                GetBrowserPolicy403Example:
                  summary: Default getBrowserPolicy 403 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '404':
          description: Browser policy not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                GetBrowserPolicy404Example:
                  summary: Default getBrowserPolicy 404 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                GetBrowserPolicy500Example:
                  summary: Default getBrowserPolicy 500 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
    put:
      operationId: updateBrowserPolicy
      summary: Palo Alto Networks Update Browser Security Policy
      description: Updates an existing browser security policy configuration.
      tags:
      - Policies
      parameters:
      - name: policy_id
        in: path
        required: true
        description: Unique identifier of the browser policy to update.
        schema:
          type: string
        example: '791625'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BrowserPolicyRequest'
            examples:
              UpdateBrowserPolicyRequestExample:
                summary: Default updateBrowserPolicy request
                x-microcks-default: true
                value:
                  name: Primary Sensor 04
                  description: Incident rule applied configured on network incident detected activity.
                  enabled: true
                  web_filtering: *id002
                  dlp_enabled: false
                  extension_policy: allow_all
                  download_control: allow
      responses:
        '200':
          description: Browser policy updated successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BrowserPolicy'
              examples:
                UpdateBrowserPolicy200Example:
                  summary: Default updateBrowserPolicy 200 response
                  x-microcks-default: true
                  value:
                    policy_id: '762727'
                    name: Staging Gateway 02
                    description: Blocked suspicious policy network configured on blocked.
                    enabled: false
                    web_filtering: *id001
                    dlp_enabled: true
                    extension_policy: block_all
                    download_control: scan
                    created_at: '2025-06-14T10:46:06Z'
                    updated_at: '2025-10-12T19:10:58Z'
        '400':
          description: Invalid request body.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                UpdateBrowserPolicy400Example:
                  summary: Default updateBrowserPolicy 400 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '401':
          description: Invalid or missing Bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                UpdateBrowserPolicy401Example:
                  summary: Default updateBrowserPolicy 401 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '403':
          description: Insufficient permissions. Requires Super User role.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                UpdateBrowserPolicy403Example:
                  summary: Default updateBrowserPolicy 403 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '404':
          description: Browser policy not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                UpdateBrowserPolicy404Example:
                  summary: Default updateBrowserPolicy 404 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                UpdateBrowserPolicy500Example:
                  summary: Default updateBrowserPolicy 500 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
    delete:
      operationId: deleteBrowserPolicy
      summary: Palo Alto Networks Delete Browser Security Policy
      description: >-
        Deletes a browser security policy. Policies assigned to active
        deployments must be unassigned before deletion.
      tags:
      - Policies
      parameters:
      - name: policy_id
        in: path
        required: true
        description: Unique identifier of the browser policy to delete.
        schema:
          type: string
        example: '462762'
      responses:
        '204':
          description: Browser policy deleted successfully.
        '401':
          description: Invalid or missing Bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                DeleteBrowserPolicy401Example:
                  summary: Default deleteBrowserPolicy 401 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '403':
          description: Insufficient permissions. Requires Super User role.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                DeleteBrowserPolicy403Example:
                  summary: Default deleteBrowserPolicy 403 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '404':
          description: Browser policy not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                DeleteBrowserPolicy404Example:
                  summary: Default deleteBrowserPolicy 404 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                DeleteBrowserPolicy500Example:
                  summary: Default deleteBrowserPolicy 500 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /v1/users:
    get:
      operationId: listBrowserUsers
      summary: Palo Alto Networks List Browser Users
      description: >-
        Returns the list of users enrolled in the Prisma Access Browser.
        Includes user identity information, assigned policy, and current
        active session count.
      tags:
      - Users
      parameters:
      - name: policy_id
        in: query
        description: Filter users by assigned browser policy.
        schema:
          type: string
        example: '645121'
      - name: offset
        in: query
        description: Number of results to skip for pagination.
        schema:
          type: integer
          default: 0
        example: 0
      - name: limit
        in: query
        description: Maximum number of users to return.
        schema:
          type: integer
          default: 50
          maximum: 200
        example: 50
      responses:
        '200':
          description: Browser users returned.
          content:
            application/json:
              schema:
                type: object
                properties:
                  total:
                    type: integer
                  offset:
                    type: integer
                  limit:
                    type: integer
                  items:
                    type: array
                    items:
                      $ref: '#/components/schemas/BrowserUser'
              examples:
                ListBrowserUsers200Example:
                  summary: Default listBrowserUsers 200 response
                  x-microcks-default: true
                  value:
                    total: 828
                    offset: 606
                    limit: 36
                    items:
                    - user_id: '519106'
                      email: [email protected]
                      display_name: Carlos Doe
                      policy_id: '550297'
                      active_sessions: 493
                      last_active_at: '2024-12-26T17:43:03Z'
        '401':
          description: Invalid or missing Bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                ListBrowserUsers401Example:
                  summary: Default listBrowserUsers 401 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '403':
          description: Insufficient permissions.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                ListBrowserUsers403Example:
                  summary: Default listBrowserUsers 403 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                ListBrowserUsers500Example:
                  summary: Default listBrowserUsers 500 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /v1/users/{user_id}/sessions:
    get:
      operationId: getUserSessions
      summary: Palo Alto Networks Get User Sessions
      description: >-
        Returns the active and recent browser sessions for a specific user.
        Session data includes device, IP address, policy applied, and
        session duration.
      tags:
      - Users
      parameters:
      - name: user_id
        in: path
        required: true
        description: Unique identifier of the browser user.
        schema:
          type: string
        example: '194968'
      - name: status
        in: query
        description: Filter sessions by status.
        schema:
          type: string
          enum:
          - active
          - terminated
        example: active
      - name: limit
        in: query
        description: Maximum number of sessions to return.
        schema:
          type: integer
          default: 50
          maximum: 200
        example: 50
      responses:
        '200':
          description: User sessions returned.
          content:
            application/json:
              schema:
                type: object
                properties:
                  total:
                    type: integer
                  items:
                    type: array
                    items:
                      $ref: '#/components/schemas/BrowserSession'
              examples:
                GetUserSessions200Example:
                  summary: Default getUserSessions 200 response
                  x-microcks-default: true
                  value:
                    total: 788
                    items:
                    - session_id: '926940'
                      user_id: '494860'
                      device_id: '107670'
                      ip_address: 10.108.68.13
                      policy_id: '176224'
                      browser_version: 4.0.8
                      status: active
                      started_at: '2024-10-10T11:55:14Z'
                      ended_at: '2026-07-09T16:25:54Z'
                    - session_id: '926940'
                      user_id: '494860'
                      device_id: '107670'
                      ip_address: 10.108.68.13
                      policy_id: '176224'
                      browser_version: 4.0.8
                      status: active
                      started_at: '2024-10-10T11:55:14Z'
                      ended_at: '2026-07-09T16:25:54Z'
        '401':
          description: Invalid or missing Bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                GetUserSessions401Example:
                  summary: Default getUserSessions 401 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '403':
          description: Insufficient permissions.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                GetUserSessions403Example:
                  summary: Default getUserSessions 403 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '404':
          description: User not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                GetUserSessions404Example:
                  summary: Default getUserSessions 404 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                GetUserSessions500Example:
                  summary: Default getUserSessions 500 response
                  x-microcks-default: true
                  value:
                    error: example-error
                    message: Suspicious detected incident malware activity traffic traffic.
                    request_id: a6ecb027-74a1-4efb-9882-cb98e9bab4bf
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /v1/deployments:
    get:
      operationId: listDeployments
      summary: Palo Alto Networks List Browser Deployments
      description: >-
        Returns the list of browser deployment configurations. Deploy

# --- truncated at 32 KB (70 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-prisma-access-browser-api-openapi-original.yml