How To Get the the Config of a Virtual Systems (VSYS)

[Sadik_Khirbash]

Hello all! 

I am new to Palo Alto FWs and have a simple question.

We have a PA-5050 and one of the users has been assigned a "Virtual Administror" role to a specific VSYS. The Administrator type is "Dynamic". This user was trying to get a dump/copy of the configuraiton of the specific VSYS he is assiged to; however, when he did that he was able to get a copy of the configs of other VSYSes.

My question is how do I limit this particular user to access the VSYS to which he was assignged to only and not be able to access the configuraiton of the other VSYSes? 

Thanks in advance. 

~sK 

[rmonvon]

Hi...You need to change the Admin type from Dynamic to 'Device Group and Template Admin' and restrict the admin to the VSYS.  Thanks.