Configure an Admin Role Profile
Admin Role profiles are custom Administrative Roles that enable you to define granular administrative access privileges to ensure protection for sensitive company information and privacy for end users. As a best practice, create Admin Role profiles that allow administrators to access only the areas of the management interfaces required to perform their jobs.
- Select PanoramaAdmin Roles and click Add.
- Enter a Name for the profile and select the Role type: Panorama or Device Group and Template.
- Configure access privileges to each functional area of
Panorama (Web UI) and firewalls (Context
Switch UI) by toggling the icons to the desired setting:
Enable (read-write), Read Only, or Disable.If administrators with custom roles will commit device group or template changes to managed firewalls, you must give those roles read-write access to PanoramaDevice Groups and PanoramaTemplates. If you upgrade from an earlier Panorama version, the upgrade process provides read-only access to those nodes.You cannot manage access to the firewall CLI or XML API through context-switching privileges in Panorama roles.
- If the Role type is Panorama, configure access to the XML API by toggling the Enabled/Disabled icon for each functional area.
- If the Role type is Panorama, select an access level for the Command Line interface: None (default), superuser, superreader, or panorama-admin.
- Click OK to save the profile.
Configure an Admin Role Profile
Configure an Admin Role Profile Admin Role profiles enable you to define granular administrative access privileges to ensure protection for sensitive company information and privacy ...
Administrative Roles You configure administrator accounts based on the security requirements of your organization, any existing authentication services that your network uses, and the required ...
Panorama > Admin Roles
Panorama > Admin Roles Admin Role profiles are custom roles that define the access privileges and responsibilities of administrators. For example, the roles assigned to ...
Administrative Role Types
Administrative Role Types A role defines the type of access that an administrator has to the firewall. The Administrator Types are: Role Based —Custom roles ...
Reference: Web Interface Administrator Access
Reference: Web Interface Administrator Access You can configure privileges for an entire firewall or for one or more virtual systems (on platforms that support multiple ...
Role-Based Access Control
Role-Based Access Control Role-based access control (RBAC) enables you to define the privileges and responsibilities of administrative users (administrators). Every administrator must have a user ...
Configure a Panorama Administrator Account
Configure a Panorama Administrator Account Administrative accounts specify Administrative Roles and authentication for Panorama administrators. The service that you use to assign roles and perform ...
Device > Admin Roles
Device > Admin Roles Select Device Admin Roles to define Admin Role profiles, which are custom roles that determine the access privileges and responsibilities of ...
Set Up a Panorama Administrative Account and Assign CLI Privileges
Set Up a Panorama Administrative Account and Assign CLI Privileges To set up a custom Panorama administrative role and assign CLI privileges, use the following ...