A key to successful configuration management in a dynamic environment is to be able to assign the appropriate privileges for your team members. Panorama provides extensive role-based access control (RBAC) that allows granular role definition. RBAC can be combined with access domains to facilitate segmenting access to managed firewalls. This helps reduce your attack surface and avoid accidental or malicious misuse of administrator privileges.

See the Best Practices for Security Administrative Access for more detailed information on properly controlling access to your Panorama and managed firewall configurations.