> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/update-cloud-permissions-after-cortex-release-updates.md).

# Update cloud permissions after Cortex Cloud release updates

Manage permission updates for your cloud instances following new feature releases or bug fixes.

This topic provides guidance on how to manage permission updates for your cloud instances following new feature releases or bug fixes. It outlines how users are notified of required permission changes and provides step-by-step instructions for granting necessary permissions to ensure continued functionality and security.

{% hint style="info" %}

#### Prerequisites

* Ensure that the user account used to modify permissions has the necessary privileges within both the Cortex platform and your cloud environment, for example, AWS or Azure.
* You received a notification regarding a new version available that requires permission updates, or viewed a **Update Available** status in the **Data Sources & Integrations** page.
  {% endhint %}

1. Navigate to the **Data Sources & Integrations** page.
2. To identify instances requiring updates:

   1. For the relevant instance, locate the **Update Status** column.
   2. Filter or sort by this column to quickly identify all instances marked as **Update Available**. The message on the page indicates the number of instances that need updating.

   <div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><h4>Note</h4><p>Instances requiring updates will not change their connection status, for example, <strong>Connected</strong>, <strong>Warning</strong>, <strong>Error</strong>, <strong>Disabled</strong>, due to the pending permission update.</p></div>
3. Click the name of the instance that shows **Update Available**. The instance detail panel opens.
4. In the **Security Capabilities** section, an action button appears at the top. The button label depends on the state of the instance:
   * **Update Available**: the instance needs a new template deployed to add permissions, but has no current permission errors.
   * **Resolve Permission Issues**: the instance has permission errors but no pending update.
   * **Update and Resolve**: the instance both needs a new template and has current permission errors.
5. Click the button. In the **This instance should be updated** dialog box, follow the process appropriate for your deployment environment:
   * **Infrastructure as Code (IaC)**: Click **Download Template** to download the template. Execute the template in your cloud environment at the appropriate scope. See [Edit your onboarded CSP configuration](/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/edit-your-onboarded-csp-configuration.md) for details on executing the template to update your cloud instance.
   * **Manual**: To resolve permission errors and update the cloud instance, manually make the required changes in your cloud environment at the appropriate scope. After applying the changes, confirm that the changes have been made by selecting **I've applied the change. Don't show this message again.**
6. Return to the **Data Sources & Integrations** page and verify that the updated status of the instance shows as up-to-date, or the update is in progress.
7. Monitor the instance's health and functionality to confirm the changes have taken effect and the connector is operating as expected.

   If you encounter issues during the permission update process, check the generated health alerts for more specific details.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security/onboard-and-configure/deployment-steps-and-checklist/cloud-service-provider-csp-onboarding/update-cloud-permissions-after-cortex-release-updates.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.