Administrative accounts specify Administrative Roles, Administrative Authentication methods, and Access Domains for Panorama administrators.
You can’t add an administrator account to a Dedicated Log Collector (M-Series appliance in Log Collector mode). Only the predefined administrator account with the default username (admin) is available on Dedicated Log Collectors.
Configure an Administrative Account
Select Panorama > Administrators and click Add.
Enter a user Name for the administrator.
Select an Authentication Profile if Panorama will use Kerberos SSO or an external service for authentication. If Panorama will use local authentication, set the Authentication Profile to None and enter a Password and then Confirm Password.
For the Administrator Type, select the role type: Dynamic —Select a predefined administrator role. Custom Panorama Admin —Select the Admin Role Profile you created for this administrator. Device Group and Template Admin —In the Access Domain to Administrator Role section, add access domains and map each one to an Admin Role profile: Click Add. Select an Access Domain from the drop-down. Click the adjacent Admin Role cell. Select an Admin Role profile.
( Optional ) Select a Password Profile if you will use local authentication. For details, see Configure Panorama Password Profiles and Complexity.
Click OK and Commit, select Panorama for the Commit Type, and click Commit again.

Related Documentation