Custom admin role for GUI

[Satish]

Hi Friends,

I want to custom granular Access to the Device Tab (setup-operation-export and import) for custom role-based administrator.but i think it is not possible. please share the your suggestion.

Regards

Satish

[dreputi]

Hello Satish,

Yes you are right, the finest you can do would be whether to allow/deny access to 'setup' tab but not more granular than that.

Hope that helps.

Regards,

Dileep

[Satish]

Hi Dilleep,HULK, Steven Puluka, panos, hshah hsharma

We are creating one role and in this we are not able to assign import / Export config option on this... Is this possible?

Thanks in advance.

Regards

Satish

[pulukas]

Unfortunately, the setup menu as a whole is all that yo can secure to a role as you have seen.

All the sub-tabs within setup will will available to everyone with the "setup" change enabled.

This would require a feature request be submitted for a change in PanOS to accomplish with your sales engineer.

I would recommend you give all the users read access to the tab then setup a system where they can submit the change request they have for the items located here via the help desk or some other existing mechanism.

[dreputi]

Hi Satish,

I agree with with Steven. Currently it is not possible to choose the import/export config options in admin role. You can submit a feature request through your SE so that this can be implemented in future versions.

With the current features, the best you could do is to create two roles one with access to 'setup' and other without so that you can assign it to an admin if he needs setup access or not.

Let us know if it helps.

-Dileep

[panos · Accepted solution]

Hi,

You need to check if there is a FR for that for request a new, because there is not a function to do that for now.

Regards

[Satish]

Thanks Pan OS.

Regards

Satish