Select
Device > Admin Roles
to define Admin Role profiles, which are custom roles that determine the
access privileges and responsibilities of administrative users. You assign
Admin Role profiles or dynamic roles
when you
Device > Administrators .
when you
|
|
The firewall has three predefined roles you can use for common criteria purposes. You first use the superuser role for initial firewall configuration and to create the administrator accounts for the Security Administrator, Audit Administrator, and Cryptographic Administrator. After you create these accounts and apply the proper common criteria Admin Roles, you then log in using those accounts. The default superuser account in Federal Information Processing Standard (FIPS)/Common Criteria (CC) FIPS-CC mode is
admin
and has a default password of
paloalto
. In standard operating mode, the default admin password is
admin
. The predefined Admin Roles were created where there is no overlap in capabilities, except that all have read-only access to the audit trail (except audit administrator with full read/delete access. These admin roles cannot be modified and are defined as follows:
| Administrator Role Setting | Description |
|---|---|
|
|
|
|
|
|
|
|
applies to specific virtual systems on the firewall and specific aspects of virtual systems (if Multi Virtual System Capability is enabled). An Admin Role Profile based on |
|
|
to set the permitted access privileges: |
|
|
features to set the permitted access privileges ( |
|
|
|
