How to add domain security group superuser access

[FarzanaMustafa]

Hello,

I would like to add a domain security group superuser access to Panorama and devices.  So any users in the below groups access to both panorama and firewall’s.  

Superusers - CN=PA Superusers,OU=Global Groups,OU=Ad Australia,DC=ad,DC=com,DC=au

Superusers (Read Only) - CN=PA Superusers RO,OU=Global Groups,OU=Ad Australia,DC=ad,DC=com,DC=au

Please advise how to achieve this or share a link that shows the steps.

Thanks in advance!

[Remo · Accepted solution]

Hi @FarzanaMustafa

This needs to be done with a RADIUS server who actually authenticates the users and based on their group memberships the RADIUS server twlls panorama and the firewalls which permissions to assign to the users.

Some help about that you can find here: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIxCAK