>
    Strata Copilot
    Restrict Administrator Access to Commit and Validate Functions
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Firewall Administration
    4. Reference: Web Interface Administrator Access
    5. Web Interface Access Privileges
    6. Restrict Administrator Access to Commit and Validate Functions
    Download PDF
    Next-Generation Firewall

    Restrict Administrator Access to Commit and Validate Functions

    Table of Contents

    Restrict Administrator Access to Commit and Validate Functions

    Configure administrator role permissions to restrict access to commit and validate operations on PAN-OS firewalls for enhanced security control.
    To restrict access to commit (and revert), save, and validate functions when creating or editing an Admin Role profile (DeviceAdmin Roles), scroll down to the Commit, Save, and Validate options on the WebUI tab.
    Access Level
    Description
    Enable
    Read Only
    Disable
    Commit
    Sets the default state to enabled or disabled for all of the commit and revert privileges described below.
    Yes
    N/A
    Yes
    Device
    When disabled, an administrator cannot commit or revert changes that any administrator made to the firewall configuration, including his or her own changes.
    Yes
    N/A
    Yes
    Commit For Other Admins
    When disabled, an administrator cannot commit or revert changes that other administrators made to the firewall configuration.
    Yes
    N/A
    Yes
    Save
    Sets the default state to enabled or disabled for all of the save operation privileges described below.
    Yes
    N/A
    Yes
    Partial save
    When disabled, an administrator cannot save changes that any administrator made to the firewall configuration, including his or her own changes.
    Yes
    N/A
    Yes
    Save For Other Admins
    When disabled, an administrator cannot save changes that other administrators made to the firewall configuration.
    Yes
    N/A
    Yes
    Validate
    When disabled, an administrator cannot validate a configuration.
    Yes
    N/A
    Yes

    © 2026 Palo Alto Networks, Inc. All rights reserved.