Sample Tenant-Level Configuration
Create a networking-focused user who:
Create a tenant-level administrative user, enabling
Commitpermissions in the
Admin Role Profile, and disabling or making
Read Onlyany permissions that you don’t want the tenant-level administrative user to have.
Create a security-focused user who:
To prevent a tenant-level administrative user from viewing or accessing the plugin, remove plugin access for a tenant-level administrator. For all other Panorama-related permissions, change the Admin Role permissions for the user.
Create a hybrid user who:
This configuration is not possible. You cannot make the Cloud Services plugin read-only. You can only provide access to admin users to view it and use it to make configuration changes, or disallow them from viewing it.