What are the restrictions of the built-in Panorama Admin role?

[chrisp]

So far i have been unable to find any mention of this admin role in the documentation. After a quick test I only see one difference in that a panorama admin can't create new admin accounts or roles. Is that the only difference?

[mschuricht · Accepted solution]

The Panorama admin is essentially the equivalent to a Device admin on a firewall.

The Panorama administrator cannot do the following actions

• Create, modify, or delete Administrators
• Create, modify, or delete Admin Roles
• Export, validate, revert, save, load, or import the configuration from Device > Setup
• Configure "Scheduled Config Export" functionality on the Panorama tab