topic ACC Tab no Appears in General Topics

ACC Tab no Appears

Meshall — Mon, 23 Dec 2019 20:01:56 GMT

Can you help me to find the ACC tab i can not found it ?

Re: ACC Tab no Appears

kiwi — Tue, 24 Dec 2019 08:04:08 GMT

You're probably logged in with an Admin Role Profile that has the 'ACC' tab disabled as illustrated in the screenshot below :

Admin Role Profile

Cheers !

-Kiwi.

Re: ACC Tab no Appears

aljohani1409 — Wed, 25 Dec 2019 17:06:29 GMT

i can not found it !

Re: ACC Tab no Appears

BPry — Wed, 25 Dec 2019 17:55:19 GMT

@aljohani1409,

Are you attempting to modify your access with the account that doesn't have access to ACC, or an account with superuser permissions? From the screenshot you shared it looks like you are attempting to give your limited profile additional permissions, which isn't going to work.

Re: ACC Tab no Appears

aljohani1409 — Wed, 25 Dec 2019 18:35:06 GMT

Right now I'm using admin (superadmin) still i can not found ACC !

Re: ACC Tab no Appears

BPry — Thu, 26 Dec 2019 23:23:23 GMT

@aljohani1409,

If your superuser isn't able to view the ACC something sounds kind of messed up. I would start by restarting the management-server and seeing if things start to show up normally, and if that doesn't work attempt to restart the box. If still no joy you'll need to contact TAC.

When it comes to your non-superuser account ensure that the assigned admin-role profile has ACC enabled either in the GUI or the XML.

<device> <webui> <acc>enable</acc>

Re: ACC Tab no Appears

MP18 — Mon, 30 Dec 2019 21:34:31 GMT

I tested this with my PA

I can see the ACC tab with non admin user.

Re: ACC Tab no Appears

Brandon_Wertz — Tue, 31 Dec 2019 16:57:36 GMT

@aljohani1409 wrote:
Right now I'm using admin (superadmin) still i can not found ACC !

@aljohani1409 as @kiwi and others have already pointed out, you're 99.9999999% probably using an account via a role that isn't configured to see the ACC tab.

The account in your screenshot even says you're using an account called "securityadmin." While you might preceive this role to be a "superadmin" that might be for your role/function in your company for your use of the firewall, but from the actual FIREWALL side, the administrative control of the firewall itself, I'd bet my month's pay check your "securityadmin" isn't a "superadmin."

I'd talk to the person who owns the control of your firewall.

Re: ACC Tab no Appears

Brandon_Wertz — Tue, 31 Dec 2019 17:00:55 GMT

@Meshall ... Ditto, to what I commented about @aljohani1409 had posted. @kiwi was more than likely spot-on with identifying the issue.

Re: ACC Tab no Appears

Meshall — Wed, 01 Jan 2020 04:45:32 GMT

Thank you for your support , FYI this firewall on my test lab not production environment. right now I'm access thought admin account

Re: ACC Tab no Appears

Meshall — Wed, 01 Jan 2020 05:32:08 GMT

I have verify my admin account roll is superuser as below snapshot

Re: ACC Tab no Appears

sahithyan.subbu — Wed, 01 Jan 2020 16:41:17 GMT

Hi Meshall,

What is the Platform/Hardware ? Is it VM ?

And also what is the OS version and License type ?

Re: ACC Tab no Appears

Brandon_Wertz — Thu, 02 Jan 2020 16:35:54 GMT

Can you log into the FW with an account not leveraging a custom role? When you log into the FW with that account can you see the ACC tab?

You keeping showing the role, which shows what you've been configured to be able to see, and you think that's proof something is wrong.

It looks like someone has set this role up with ACC removed and for some reason they've also still allowed that account with that role to see these custom groups.

I bet if you log in with an actual admin (like I said before) you'll see that the role you're using has been disallowed from seeing ACC. "Please do the needful!!!!" (hahahahaha)

Re: ACC Tab no Appears

Meshall — Thu, 02 Jan 2020 16:46:36 GMT

^^ I have reset into default configuration and I’m able to see the ACC ,but one i upload backup configuration the ACC will disappear

FYI this FW is on my lab and install on VM

Re: ACC Tab no Appears

BPry — Thu, 02 Jan 2020 16:54:46 GMT

@Meshall,

That would point towards something within the configuration itself being the issue, which would be expected from everything that you've posted. If I would have to guess at this point, it sounds like you may have overwrote a default value when you created your custom authentication profile which sort of broke things.

If you take the XML file and remove everything under <authentication-profile> until </authentication-profile> you could give that a shot with the backup that you took, you'll just have to make sure that you modify it so you have <authentication-profile/> and modify the permissions of any users to role-based. If you don't know how to work in the XML file, you'll either need to contact TAC or rebuild the configuration.

Re: ACC Tab no Appears

tcleghorn — Mon, 24 Aug 2020 14:44:29 GMT

I was wondering why my tab wasn't there as well. I was logged in as a Superuser (built-in account). No other user I put in as Superuser, Superuser (ReadOnly) or any other User could see the ACC. Context switch from Panorama could not see the ACC either (although Panorama did have the ACC tab).

It turns out that the VM-50 Lite does not have the ACC tab:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-new-features/virtualization-features/vm-50-lite

To get ACC, you'll have to use Panorama with VM-50 Lites.

Re: ACC Tab no Appears

Ram_Bista — Wed, 18 Aug 2021 02:26:37 GMT

If you are using VM-50 Lite, you will NOT see the ACC Tab there in the Web UI.

Re: ACC Tab no Appears

Ram_Bista — Wed, 18 Aug 2021 02:27:34 GMT

If you are using VM-50 Lite version, you will NOT see the ACC Tab there.

Re: ACC Tab no Appears

MP18 — Mon, 23 Aug 2021 03:23:35 GMT

@Ram_Bista

Thanks for updating the post.

Regards