Custom admin role for GUI

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Custom admin role for GUI

L4 Transporter

Hi Friends,

I want to custom granular Access to the Device Tab (setup-operation-export and import) for custom role-based administrator.but i think it is not possible. please share the your suggestion.

not.PNG

Regards

Satish

1 accepted solution

Accepted Solutions

L6 Presenter

Hi,

You need to check if there is a FR for that for request a new, because there is not a function to do that for now.

Regards

View solution in original post

6 REPLIES 6

L4 Transporter

Hello Satish,

Yes you are right, the finest you can do would be whether to allow/deny access to 'setup' tab but not more granular than that.

Untitled.png

Hope that helps.

Regards,

Dileep

Unfortunately, the setup menu as a whole is all that yo can secure to a role as you have seen.

All the sub-tabs within setup will will available to everyone with the "setup" change enabled.

This would require a feature request be submitted for a change in PanOS to accomplish with your sales engineer.

I would recommend you give all the users read access to the tab then setup a system where they can submit the change request they have for the items located here via the help desk or some other existing mechanism.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center

L4 Transporter

Hi Satish,

I agree with with Steven. Currently it is not possible to choose the import/export config options in admin role. You can submit a feature request through your SE so that this can be implemented in future versions.

With the current features, the best you could do is to create two roles one with access to 'setup' and other without so that you can assign it to an admin if he needs setup access or not.

Let us know if it helps.

-Dileep

L6 Presenter

Hi,

You need to check if there is a FR for that for request a new, because there is not a function to do that for now.

Regards

Thanks Pan OS.

Regards

Satish

  • 1 accepted solution
  • 3567 Views
  • 6 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!