A specialized migration utility for moving Prisma Access security policies, objects, and rules between different Strata Cloud Manager tenants.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install prisma-migrate
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install prisma-migrate using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Prisma Access Tenant Migrator?
The Prisma Access Tenant-to-Tenant Configuration Migration skill is a robust tool designed for network security engineers who need to synchronize or move complex environments across different Tenant Service Groups (TSGs). It automates the extraction of configurations from a source tenant and handles the complex logic required to inject them into a target tenant through the Strata Cloud Manager API.
By utilizing Openclaw Skills, this tool intelligently manages the technical hurdles of migration, such as resolving naming conflicts, maintaining strict dependency ordering, and stripping tenant-specific metadata that would otherwise cause API failures. It ensures a smooth transition for objects ranging from simple address tags to complex security and NAT rules.
Prisma Access Tenant Migrator Use Cases
- Moving security policies and address objects from a development or staging TSG to a production environment.
- Consolidating multiple Prisma Access tenants into a single managed instance.
- Replicating standard security baseline configurations across new customer or departmental tenants.
- Auditing and mirroring specific NAT rules or service groups across geographically dispersed tenants.
How Prisma Access Tenant Migrator Works
- Export Configuration: The skill authenticates via SASE APIs and extracts all objects in a specific dependency-aware sequence (Tags first, then Addresses, then Rules).
- Conflict Analysis: It scans the target tenant across all folders (Shared, All, Mobile Users, etc.) to identify existing objects or name collisions.
- Data Transformation: Source-specific fields like IDs, timestamps, and folder metadata are stripped or remapped to fit the target tenant's schema.
- Target Import: Transformed objects are POSTed to the target tenant, with logic to handle pagination and API rate limiting.
- Validation and Commit: The skill performs a candidate configuration push to validate the integrity of the migration before the user manually confirms the final commit.
Prisma Access Tenant Migrator Setup
Ensure you have the required credentials for both the source and destination tenants. Set the following environment variables in your terminal:
# Source tenant credentials
export SRC_SCM_CLIENT_ID="your-source-id"
export SRC_SCM_CLIENT_SECRET="your-source-secret"
export SRC_SCM_TSG_ID="your-source-tsg-id"
# Target tenant credentials
export DST_SCM_CLIENT_ID="your-target-id"
export DST_SCM_CLIENT_SECRET="your-target-secret"
export DST_SCM_TSG_ID="your-target-tsg-id"
Prisma Access Tenant Migrator Data Schema & Taxonomy
The skill manages data migration according to a strict dependency matrix to ensure reference integrity. Below is the primary resource mapping:
| Object Category | Supported Resources |
|---|---|
| Identity & Tags | Tags, Address Objects, Address Groups |
| Services | Service Objects, Service Groups, Application Filters |
| Profiles | File Blocking, Profile Groups (with reference stripping) |
| Policies | Security Rules, NAT Rules, Decryption Rules |
| Exclusions | System-preset objects and default EDLs are automatically skipped |
Prisma Access Tenant Migrator Advanced Features
- Dependency Intelligence: Automatically orders migrations so that tags and addresses are created before the rules that reference them.
- Conflict Resolution UI: Provides interactive prompts to Skip, Overwrite, or Rename objects when naming collisions occur.
- Reference Stripping: Intelligently removes broken sub-profile references in Profile Groups to allow partial migration of complex objects.
- Dry-Run Safety: Displays a comprehensive summary of planned changes without modifying the target environment.
- Candidate Validation: Uses SCM's candidate push feature to test configuration validity before the final production commit.
SKILL.md
Loading
Related Openclaw Skills
Prisma Access Troubleshooter
A diagnostic tool for identifying and resolving connectivity, security policy, and configuration issues within Prisma Access via Strata Cloud Manager.
Munger Lens
Munger Lens is a cognitive framework for AI agents based on Charlie Munger's multidisciplinary mental models and rational decision-making principles.
Blizzard Entertainment Intelligence
A specialized data retrieval skill providing deep contextual information and market insights for Blizzard Entertainment within AI agent workflows.
Xbox Knowledge Insight
A specialized knowledge module providing structured insights and critical data about the Xbox ecosystem for AI agents.
Prisma Access Configuration Auditor
A comprehensive auditing tool to validate Prisma Access configurations against security best practices and compliance benchmarks.
Liu Yao Divination
A professional I Ching divination tool for AI agents to perform hexagram generation, arrangement, and traditional Chinese fortune-telling.
Featured*
