>
    Strata Copilot
    Configure the ZTP Installer Administrator Account
    Focus
    Download PDF
    Focus
    1. Home
    2. Panorama
    3. Manage Firewalls with Panorama
    4. Set Up Zero Touch Provisioning
    5. Configure the ZTP Installer Administrator Account
    Download PDF
    Panorama

    Configure the ZTP Installer Administrator Account

    Table of Contents

    Configure the ZTP Installer Administrator Account

    Configure the ZTP installer admin for on-boarding new ZTP firewalls.
    Where Can I Use This?What Do I Need?
    • NGFW (Managed by Panorama)
    • Device Management License
    • Panorama superuser role
    The ZTP installer admin user is an administrator account created for non-IT staff or installation contractor to on-board new ZTP firewalls. The installer admin uses an automatically created installeradmin admin role to limit visibility into the Panorama web interface and only allow the installer the ability to enter the ZTP firewall claim key and serial number on Panorama.
    1. Log in to the Panorama web interface.
    2. Select PanoramaAdmin Roles and verify that the installeradmin admin role is created.
      The installeradmin is automatically created after you successfully install the ZTP plugin on Panorama.
    3. Configure the ZTP installer administrator user.
      1. Select PanoramaAdministrators and Add a new admin user.
      2. Enter a descriptive Name for the ZTP installer admin user.
      3. Enter a secure Password and Confirm Password.
      4. For the Administrator Type, select Custom Panorama Admin.
      5. For the Profile, select installeradmin
      6. Click OK to save your configuration changes.
    4. Select Commit and Commit to Panorama.

    © 2026 Palo Alto Networks, Inc. All rights reserved.