Create an admin role profile to push individual device
group and template configuration objects to specific firewalls managed
by the Panorama™ management server.
| Where Can I Use This? | What Do I Need? |
|---|
- NGFW (Managed by Panorama)
|
|
To allow for greater control of configuration changes of managed firewalls, create an
admin role profile to enable a Panorama administrator to push configuration for one
or more Panorama administrators from the Panorama™ management server to managed
firewalls. After you
commit
selective configuration changes to Panorama, you can
select
specific Panorama admin changes to review the configuration changes and
then push only those changes made by the selected admins to your managed firewalls.
Leveraging selective pushes to managed firewalls also reduces the risk of pushing
incomplete device group and template configurations to managed firewalls by allowing
you to explicitly exclude incomplete configuration changes when you push to managed
firewalls. This helps mitigate and avoid potential outages and configuration related
issues that could cause network disruptions,.
Administrators with Superuser or Panorama admin
role privileges can push and review object level changes of other
administrators by default. However, you can modify the Panorama
administrator admin roles to modify the object level configuration
privileges as needed.
