---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Install and Configure

# Install and Configure {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Install and configure Palo Alto Networks XSIAM integration for Security Operations application from the ServiceNow Store on your ServiceNow AI Platform® instance.

## Before you begin

Role required: sn_si.admin, sn_si.ingestion_profile_admin  
Note:  
Users with the sn_si.admin role can perform all operations available to a profile admin because this role inherits the required permissions by default.

## Procedure

1. Download Security Incident Response Integration with Palo Alto Networks XSIAM integration from the ServiceNow® Store and install it.
2. Navigate to AllSecurity OperationsIntegrationsIntegration Configurations.
3. Search for Security Incident Response Integration with Palo Alto Networks XSIAM tile, and select Configure.
4. On the form, fill in the fields.  
   {#configure-cortex-xsiam-siem__table_evw_xjl_gxc__entry__2}

   | Field | Description |
   |-|-|
   | Name | Name of the Cortex XSIAM integration. |
   | Authorization Key | Secret API key to authenticate XSIAM API requests. The Authorization Key should have Instance Administrator role. |
   | Key ID | API key ID associated with the authorization key. |
   | API URL | URL of the XSIAM tenant. |
   [Table 1. Security Incident Response Integration with Palo Alto Networks XSIAM form]

   {#configure-cortex-xsiam-siem__table_evw_xjl_gxc}
5. Select Submit.  
   The configured integration tile displays.

## What to do next

[Create an incident profile](https://servicenow-prod.fluidtopics.net/WkctNf2mkK_9fjWnndJkZg "Determine the Cortex XSIAM incidents that are suitable for creating security incidents by creating an incident profile in your ServiceNow AI Platform instance.")

*[\>]: and then