Configure the ZTP installer admin for on-boarding new
The ZTP installer admin user is an administrator
account created for non-IT staff or installation contractor to on-board
new ZTP firewalls. The installer admin uses an automatically created
role to limit visibility into the Panorama web interface and only
allow the installer the ability to enter the ZTP firewall claim
key and serial number on Panorama.
If you want to configure
remote authentication instead of a locally defined administrator,
you can configure authorization for the ZTP installer administrator
account using RADIUS and TACACS+ authentication so
long as you pass the
role to the Vendor-Specific Attributes (VSA) for the administrator.
configure authorization for the ZTP installer admin using SAML authentication, map