Admin Role profiles enable or disable features on the management interfaces of the firewall or Panorama, XML API, web interface, and CLI. For more details on Administrative Roles, see the PAN-OS Adminstrator’s Guide.
As a best practice, set up a separate admin account for XML API access.
Enable API Access
Select an Admin Role profile.
Go to
Device
>
Admin Roles
and select or create an admin role.
Select features available to the admin role.
Select the
XML API
tab.
Enable or disable XML API features from the list, such as
Report,
Log, and
Configuration.
Select
OK
to confirm your change.
Assign the admin role to an administrator account.