topic Any way to remove the config/commit lock button in a custom admin role? in General Topics

Any way to remove the config/commit lock button in a custom admin role?

jsalmans — Mon, 06 Mar 2017 18:01:25 GMT

Hi all,

I'm wanting to set up a "Monitoring and Reporting" only role on Panorama. I've gone throughe and disabled commit/validate as well as all of the tabs except Dashboard, ACC, and Monitor.

The thing is I've noticed the commit/config lock button is still present and clickable. Is there any way to remove this on accounts I want to be read-only and limited which shouldn't need the ability to do a lock?

Thanks!

Re: Any way to remove the config/commit lock button in a custom admin role?

BPry — Mon, 06 Mar 2017 18:56:54 GMT

What PANos are you running; I don't believe my monitoring users can see these icons at all.

Re: Any way to remove the config/commit lock button in a custom admin role?

jsalmans — Mon, 06 Mar 2017 21:09:12 GMT

Hi BPry,

I'm on 7.1.8 currently, The Commit link itself is removed after I told the role I didn't want it to be able to commit or validate but the little lock icon is still there.

I figured I missed something in the role but I don't see anything else to remove or put at read only... the only stuff left I believe are the Dashboard, ACC, and Monitoring tabls along with their sub-items.

Thanks,

Jason Salmans