Home
EN
Location
Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base
Clear
PAN-OS CLI Quick Start
:
Set Up a Firewall Administrative Account and Assign CLI Privileges
Updated on
Thu May 02 22:52:11 UTC 2024
Focus
Download PDF
Updated on
Thu May 02 22:52:11 UTC 2024
Focus
Home
PAN-OS
PAN-OS CLI Quick Start
Get Started with the CLI
Give Administrators Access to the CLI
Set Up a Firewall Administrative Account and Assign CLI Privileges
Download PDF
PAN-OS CLI Quick Start
Set Up a Firewall Administrative Account and Assign CLI Privileges
Table of Contents
Filter
Version
PAN.OS 11.1 & Later
PAN-OS 11.1 & Later
11.0
10.2
10.1
10.0 (EoL)
9.1 (EoL)
Expand all
|
Collapse all
Get Started with the CLI
Access the CLI
Verify SSH Connection to Firewall
Refresh SSH Keys and Configure Key Options for Management Interface Connection
Give Administrators Access to the CLI
Administrative Privileges
Set Up a Firewall Administrative Account and Assign CLI Privileges
Set Up a Panorama Administrative Account and Assign CLI Privileges
Change CLI Modes
Navigate the CLI
Find a Command
View the Entire Command Hierarchy
Find a Specific Command Using a Keyword Search
Get Help on Command Syntax
Get Help on a Command
Interpret the Command Help
Customize the CLI
Use the CLI
View Settings and Statistics
Modify the Configuration
Commit Configuration Changes
Test the Configuration
Test the Authentication Configuration
Test Policy Matches
Load Configurations
Load Configuration Settings from a Text File
Load a Partial Configuration
Xpath Location Formats Determined by Device Configuration
Load a Partial Configuration into Another Configuration Using Xpath Values
Use Secure Copy to Import and Export Files
Export a Saved Configuration from One Firewall and Import it into Another
Export and Import a Complete Log Database (logdb)
CLI Jump Start
CLI Cheat Sheets
CLI Cheat Sheet: Device Management
CLI Cheat Sheet: User-ID
CLI Cheat Sheet: HA
CLI Cheat Sheet: Networking
CLI Cheat Sheet: VSYS
CLI Cheat Sheet: Panorama
CLI Changes in PAN-OS 11.1+
Set Commands Introduced in PAN-OS 11.1
Set Commands Removed in PAN-OS 11.1
Show Commands Introduced in PAN-OS 11.1
Set Commands Introduced in PAN-OS 11.2
Set Commands Changed in PAN-OS 11.2
Set Commands Removed in PAN-OS 11.2
Show Commands Introduced in PAN-OS 11.2
Show Commands Removed in PAN-OS 11.2
CLI Command Hierarchy for PAN-OS 11.1+
PAN-OS 11.1 CLI Ops Command Hierarchy
PAN-OS 11.1 Configure CLI Command Hierarchy
PAN-OS 11.2 CLI Ops Command Hierarchy
PAN-OS 11.2 Configure CLI Command Hierarchy
Set Up a Firewall Administrative Account and Assign CLI Privileges
To
set up a custom firewall administrative role
and assign CLI privileges, use the following workflow:
Configure an Admin Role profile.
Select
Device
Admin Roles
and then click
Add
.
Enter a
Name
to identify the role.
For the scope of the
Role
, select
Device
or
Virtual System
.
Define access to the
Command Line
:
Device
role—
superuser
,
superreader
,
deviceadmin
,
devicereader
, or
None
.
Virtual System
role—
vsysadmin
,
vsysreader
, or
None
.
Click
OK
to save the profile.
Configure an administrator account.
Select
Device
>
Administrators
and click
Add
.
Enter a user
Name
. If you will use local database authentication, this must match the name of a user account in the local database.
If you configured an
Authentication Profile
or authentication sequence for the user, select it in the drop-down. If you select
None
, you must enter a
Password
and
Confirm Password
.
If you configured a custom role for the user, set the
Administrator Type
to
Role Based
and select the Admin Role
Profile
. Otherwise, set the
Administrator Type
to
Dynamic
and select a dynamic role.
Click
OK
and
Commit
.
Previous
Administrative Privileges
Next
Set Up a Panorama Administrative Account and Assign CLI Privileges
Recommended For You