topic Re: tft export / scp export privilege level question in General Topics

tft export / scp export privilege level question

karsten_elfenbein — Fri, 02 Dec 2011 10:56:52 GMT

Hi,

why do tft export and scp export require write access to the device?

They are not available on readonly users.

Thanks

Karsten

sspringer — Fri, 02 Dec 2011 19:07:19 GMT

What version are you running?

Readonly users should be able to export. There is a known bug with 4.0 that should be fixed in 4.0.8

- Stefan

karsten_elfenbein — Mon, 05 Dec 2011 10:04:38 GMT

Hi,

we currently have 4.0.5 installed.

The PAN-OS_4.1_CLI_Reference_Guide.pdf shows under the tftp export command:

"Required Privilege Levelsuperuser, vsysadmin, deviceadmin"

I will report back after patching the systems to 4.1

Thanks

Karsten

karsten_elfenbein — Thu, 12 Jan 2012 08:36:18 GMT

Hi,

we are currently installing a new cluster and updated that to 4.1.1 which still has that limitation.

We didn't try 4.0.8 on the older cluster as we would like to get on 4.1.* working with the improved web ui.

Karsten