Ansible Role for Managing Panorama DeviceGroup/Template

[a-techie]

Hello,

Is there anyway we can manage Panorama specific configurations(devicegroup/template etc) from Ansible? I do see that Ansible role/collection can be used to manage firewall configuration through Panorama, but nothing to manage Panorama config itself.

Any help would be appreciated!

[gfreeman]

The majority of Ansible modules work on both the firewall or Panorama.  For example:

https://paloaltonetworks.github.io/pan-os-ansible/modules/panos_address_object.html

You'll see in the argument specification that there's a "device_group" param and it says "(Panorama only)".