Dashboard

Controls access to the

Dashboard

tab. If you disable this privilege, the administrator will not see the tab and will not have access to any of the Dashboard widgets.

Yes

No

ACC

Controls access to the Application Command Center (ACC). If you disable this privilege, the

ACC

tab will not display in the web interface. Keep in mind that if you want to protect the privacy of your users while still providing access to the ACC, you can disable the

Privacy

Show Full IP Addresses

option and/or the

Show User Names In Logs And Reports

option.

Yes

No

Monitor

Controls access to the

Monitor

tab. If you disable this privilege, the administrator will not see the

Monitor

tab and will not have access to any of the logs, packet captures, session information, reports or to App Scope. For more granular control over what monitoring information the administrator can see, leave the Monitor option enabled and then enable or disable specific nodes on the tab as described in Provide Granular Access to the Monitor Tab.

Yes

No

Policies

Controls access to the

Policies

tab. If you disable this privilege, the administrator will not see the

Policies

tab and will not have access to any policy information. For more granular control over what policy information the administrator can see, for example to enable access to a specific type of policy or to enable read-only access to policy information, leave the

Policies

option enabled and then enable or disable specific nodes on the tab as described in Provide Granular Access to the Policy Tab.

Yes

No

Objects

Controls access to the

Objects

tab. If you disable this privilege, the administrator will not see the

Objects

tab and will not have access to any objects, security profiles, log forwarding profiles, decryption profiles, or schedules. For more granular control over what objects the administrator can see, leave the

Objects

option enabled and then enable or disable specific nodes on the tab as described in Provide Granular Access to the Objects Tab.

Yes

No

Network

Controls access to the

Network

tab. If you disable this privilege, the administrator will not see the

Network

tab and will not have access to any interface, zone, VLAN, virtual wire, virtual router, IPsec tunnel, DHCP, DNS Proxy, GlobalProtect, or QoS configuration information or to the network profiles. For more granular control over what objects the administrator can see, leave the

Network

option enabled and then enable or disable specific nodes on the tab as described in Provide Granular Access to the Network Tab.

Yes

No