topic Re: Custom admin role for GUI in General Topics

Custom admin role for GUI

Satish — Fri, 16 Jan 2015 11:12:13 GMT

Hi Friends,

I want to custom granular Access to the Device Tab (setup-operation-export and import) for custom role-based administrator.but i think it is not possible. please share the your suggestion.

Regards

Satish

Re: Custom admin role for GUI

dreputi — Fri, 16 Jan 2015 11:46:09 GMT

Hello Satish,

Yes you are right, the finest you can do would be whether to allow/deny access to 'setup' tab but not more granular than that.

Hope that helps.

Regards,

Dileep

Re: Custom admin role for GUI

Satish — Tue, 20 Jan 2015 09:37:16 GMT

Hi Dilleep,HULK, Steven Puluka, panos, hshah hsharma

We are creating one role and in this we are not able to assign import / Export config option on this specific role. Is this possible?

Thanks in advance.

Regards

Satish

Re: Custom admin role for GUI

pulukas — Tue, 20 Jan 2015 10:56:00 GMT

Unfortunately, the setup menu as a whole is all that yo can secure to a role as you have seen.

All the sub-tabs within setup will will available to everyone with the "setup" change enabled.

This would require a feature request be submitted for a change in PanOS to accomplish with your sales engineer.

I would recommend you give all the users read access to the tab then setup a system where they can submit the change request they have for the items located here via the help desk or some other existing mechanism.

Re: Custom admin role for GUI

dreputi — Tue, 20 Jan 2015 13:02:31 GMT

Hi Satish,

I agree with with Steven. Currently it is not possible to choose the import/export config options in admin role. You can submit a feature request through your SE so that this can be implemented in future versions.

With the current features, the best you could do is to create two roles one with access to 'setup' and other without so that you can assign it to an admin if he needs setup access or not.

Let us know if it helps.

-Dileep

Re: Custom admin role for GUI

Retired Member — Wed, 21 Jan 2015 12:32:00 GMT

Hi,

You need to check if there is a FR for that for request a new, because there is not a function to do that for now.

Regards

Re: Custom admin role for GUI

Satish — Wed, 21 Jan 2015 12:39:34 GMT

Thanks Pan OS.

Regards

Satish