How to add domain security group superuser access

FarzanaMustafa — Sat, 05 Jan 2019 22:28:59 GMT

Hello,

I would like to add a domain security group superuser access to Panorama and devices. So any users in the below groups access to both panorama and firewall’s.

Superusers - CN=PA Superusers,OU=Global Groups,OU=Ad Australia,DC=ad,DC=com,DC=au

Superusers (Read Only) - CN=PA Superusers RO,OU=Global Groups,OU=Ad Australia,DC=ad,DC=com,DC=au

Please advise how to achieve this or share a link that shows the steps.

Thanks in advance!

Re: How to add domain security group superuser access

Remo — Sun, 06 Jan 2019 19:24:47 GMT

Hi @FarzanaMustafa

This needs to be done with a RADIUS server who actually authenticates the users and based on their group memberships the RADIUS server twlls panorama and the firewalls which permissions to assign to the users.

Some help about that you can find here: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIxCAK

topic Re: How to add domain security group superuser access in General Topics

How to add domain security group superuser access

Re: How to add domain security group superuser access