Prevent users to add new portal in Gloabal Protect App

[dramchandani]

Hello Community Members, 

I am looking to restrict the users from adding any additional portal in the Global Protect App.

I know there is an option in Agent configuration that restricts users not to change the portal but that will limit users to only connecting to one portal.

We have multiple portals in our infra and we want users to give the flexibility to switch between 2-3 portals however users should not be able to add any new portals at all.

Does anyone know what configuration knob i need to configure?

[reaper]

you can set the "Enable Advanced View" to no, which will prevent them from tampering with the configuration, but allow them to switch portals

[dramchandani]

Thanks for your response, Looking at this KB article, it just controls the UI parameters but does not disable users to add a new portal.

Setting this flag to No, also poses another challenge that the user won't be able to collect dump or debug logs.

https://knowledgebase.paloaltonetworks.com/kCSArticleDetail?id=kA10g000000PPcc

[reaper]

they can't change what they can't see: the portal configuration is part of the advanced view so they wont be able to add/delete/change any of the portals

not sure about that article, but the disabled advanced view looks like this (no portals):

you're right they wont be able to get the log package, but you can still get the logs directly from the directory