Dynamic Roles vs. Role-based Panorama

[jprice2]

Hi everyone

So I was just wondering if anyone else has noticed a discrepancy between role-based and dynamic roles on their Panorama. I notice that "botnet" and "session browser" are not drop downs for my role-based admin role. That is fine since https://live.paloaltonetworks.com/docs/DOC-4172 goes to show they should not be there. However, when I use dynamic roles they will show up under my monitor tab. Not sure if this is a bug, or if I am missing something, but I would appreciate any insight.

Thanks

[kadak]

Hello jprice2,

Since Panorama itself doesn't have the session browser and botnet section under Monitor tab, you wouldn't find it under the admin role section.

The only way to control is that, to switch the context to one of the managed firewalls and create an admin role where actually have control over the session browser and botnet section. The below screenshot is from a PA-200.

Hope that helps!

Thanks and regards,

Kunal Adak