Home
EN
Location
Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base
MENU
Home
PAN-OS
PAN-OS CLI Quick Start
Get Started with the CLI
Give Administrators Access to the CLI
Set Up a Panorama Administrative Account and Assign CLI Privileges
Document:
PAN-OS CLI Quick Start
Set Up a Panorama Administrative Account and Assign CLI Privileges
Download PDF
Last Updated:
Fri Mar 10 22:14:16 UTC 2023
Current Version:
9.1
Version 11.0
Version 10.2
Version 10.1
Version 10.0 (EoL)
Version 9.1
Table of Contents
Filter
Get Started with the CLI
Access the CLI
Verify SSH Connection to Firewall
Refresh SSH Keys and Configure Key Options for Management Interface Connection
Give Administrators Access to the CLI
Administrative Privileges
Set Up a Firewall Administrative Account and Assign CLI Privileges
Set Up a Panorama Administrative Account and Assign CLI Privileges
Change CLI Modes
Navigate the CLI
Find a Command
View the Entire Command Hierarchy
Find a Specific Command Using a Keyword Search
Get Help on Command Syntax
Get Help on a Command
Interpret the Command Help
Customize the CLI
Use the CLI
View Settings and Statistics
Modify the Configuration
Commit Configuration Changes
Test the Configuration
Test the Authentication Configuration
Test Policy Matches
Load Configurations
Load Configuration Settings from a Text File
Load a Partial Configuration
Xpath Location Formats Determined by Device Configuration
Load a Partial Configuration into Another Configuration Using Xpath Values
Use Secure Copy to Import and Export Files
Export a Saved Configuration from One Firewall and Import it into Another
Export and Import a Complete Log Database (logdb)
CLI Jump Start
CLI Cheat Sheets
CLI Cheat Sheet: Device Management
CLI Cheat Sheet: User-ID
CLI Cheat Sheet: Networking
CLI Cheat Sheet: VSYS
CLI Cheat Sheet: Panorama
CLI Changes in PAN-OS 9.1
Set Commands Introduced in PAN-OS 9.1
Set Commands Changed in PAN-OS 9.1
Set Commands Removed in PAN-OS 9.1
Show Commands Introduced in PAN-OS 9.1
Show Commands Removed in PAN-OS 9.1
Get Started with the CLI
Access the CLI
Verify SSH Connection to Firewall
Refresh SSH Keys and Configure Key Options for Management Interface Connection
Give Administrators Access to the CLI
Administrative Privileges
Set Up a Firewall Administrative Account and Assign CLI Privileges
Set Up a Panorama Administrative Account and Assign CLI Privileges
Change CLI Modes
Navigate the CLI
Find a Command
View the Entire Command Hierarchy
Find a Specific Command Using a Keyword Search
Get Help on Command Syntax
Get Help on a Command
Interpret the Command Help
Customize the CLI
Use the CLI
View Settings and Statistics
Modify the Configuration
Commit Configuration Changes
Test the Configuration
Test the Authentication Configuration
Test Policy Matches
Load Configurations
Load Configuration Settings from a Text File
Load a Partial Configuration
Xpath Location Formats Determined by Device Configuration
Load a Partial Configuration into Another Configuration Using Xpath Values
Use Secure Copy to Import and Export Files
Export a Saved Configuration from One Firewall and Import it into Another
Export and Import a Complete Log Database (logdb)
CLI Jump Start
CLI Cheat Sheets
CLI Cheat Sheet: Device Management
CLI Cheat Sheet: User-ID
CLI Cheat Sheet: Networking
CLI Cheat Sheet: VSYS
CLI Cheat Sheet: Panorama
CLI Changes in PAN-OS 9.1
Set Commands Introduced in PAN-OS 9.1
Set Commands Changed in PAN-OS 9.1
Set Commands Removed in PAN-OS 9.1
Show Commands Introduced in PAN-OS 9.1
Show Commands Removed in PAN-OS 9.1
Previous
Next
Set Up a Panorama Administrative Account and Assign CLI Privileges
To
set up a custom Panorama administrative role
and assign CLI privileges, use the following workflow:
Configure an Admin Role profile.
Select
Panorama
Admin Roles
and then click
Add
.
Enter a
Name
to identify the role.
For the scope of the
Role
, select
Panorama
.
Select the
Command Line
tab and select an access level:
superuser
,
superreader
,
panorama-admin
, or
None
.
Click
OK
to save the profile.
Configure an administrator account.
Select
Panorama
Administrators
and click
Add
.
Enter a user
Name
.
If you configured an
Authentication Profile
or authentication sequence for the user, select it in the drop-down. If you select
None
, you must enter a
Password
and
Confirm Password
.
If you configured a custom role for the user, set the
Administrator Type
to
Custom Panorama Admin
and select the Admin Role
Profile
. Otherwise, set the
Administrator Type
to
Dynamic
and select a dynamic
Admin Role
.
Click
OK
and
Commit
, for the
Commit Type
select
Panorama
, and click
Commit
again.
Previous
Next
Most Popular
Recommended For You
Recommended Videos
Recommended videos not found.