How to setup Panorama to allow read-only access to one firewall managed by panorama?

[Kalemegdan]

Hello

i have following firewalls infrastructure in Panorama:

FW1

FW2

FW3

i want to add admin read-only access to user1 for FW1 but readwrite access for user1 to FW2 and FW3.

How can i do it while using Panorama?

Appreciate responce..

[Mick_Ball · Accepted solution]

 did look into this a while ago but never needed it, i have configured various roles but the same role for all devices..

RBAC, Role Based Access Control.

I have not actually applied this but try this link..

https://docs.paloaltonetworks.com/panorama/7-1/panorama-admin/panorama-overview/role-based-access-co...