Here are the 5 attributes I found. PaloAlto-Admin-Role: Attribute #1 - This can either be the default admin role name or a custom admin role name. PaloAlto-Admin-Access-Domain: Attribute #2 - This is used when a PAN device has multiple vsys. This would be the name of the vsys. PaloAlto-Panorama-Admin-Role: Attribute #3 - This can either be the default admin role name or a custom admin role name. PaloAlto-Panorama-Admin-Access-Domain: Attribute #4 - This the name of the Access Domain configured on the Panorama server. PaloAlto-User-Group: Attribute #5 - This is the name of the group to be used in the Authentication Profile. Thanks, Syed R Hasnain
... View more