Admin roles can provide us great customization in providing access to just what is needed and restrict the rest of the services in accessing a firewall or panorama. Through Admin Roles, we can provide either Web UI only access, XML API only access or CLI only access or all or combinations of them to administrators as necessary or based on their work profile. Even in the Web UI access itself they can just get access to certain features and are restricted on others. Three is also an option for read only or full access on each feature providing further flexibility. Hence, this will help in providing the right access to admin users and easy management access.