Dynamic Roles vs. Role-based Panorama

jprice2 — Mon, 07 Jul 2014 15:48:49 GMT

Hi everyone

So I was just wondering if anyone else has noticed a discrepancy between role-based and dynamic roles on their Panorama. I notice that "botnet" and "session browser" are not drop downs for my role-based admin role. That is fine since https://live.paloaltonetworks.com/docs/DOC-4172 goes to show they should not be there. However, when I use dynamic roles they will show up under my monitor tab. Not sure if this is a bug, or if I am missing something, but I would appreciate any insight.

Thanks

Re: Dynamic Roles vs. Role-based Panorama

kadak — Mon, 07 Jul 2014 16:55:45 GMT

Hello jprice2,

Since Panorama itself doesn't have the session browser and botnet section under Monitor tab, you wouldn't find it under the admin role section.

The only way to control is that, to switch the context to one of the managed firewalls and create an admin role where actually have control over the session browser and botnet section. The below screenshot is from a PA-200.

Hope that helps!

Thanks and regards,

Kunal Adak

topic Dynamic Roles vs. Role-based Panorama in General Topics

Dynamic Roles vs. Role-based Panorama

Re: Dynamic Roles vs. Role-based Panorama