tft export / scp export privilege level question

[karsten_elfenbein]

Hi,

why do tft export and scp export require write access to the device?

They are not available on readonly users.

Thanks

Karsten

[sspringer]

What version are you running?

Readonly users should be able to export. There is a known bug with 4.0 that should be fixed in 4.0.8

- Stefan

[karsten_elfenbein]

Hi,

we currently have 4.0.5 installed.

The PAN-OS_4.1_CLI_Reference_Guide.pdf shows under the tftp export command:

"Required Privilege Levelsuperuser, vsysadmin, deviceadmin"

I will report back after patching the systems to 4.1

Thanks

Karsten

[karsten_elfenbein]

Hi,

we are currently installing a new cluster and updated that to 4.1.1 which still has that limitation.

We didn't try 4.0.8 on the older cluster as we would like to get on 4.1.* working with the improved web ui.

Karsten