Creating an Admin Role in Palo Alto Networks Panorama for XML API access

Products

• VMware Aria Operations for Networks

Issue/Introduction

This article provides steps to create a custom read only Admin Role in Palo Alto Networks Panorama for XML API access.

Environment

VMware vRealize Network Insight 3.x

Resolution

To add a custom Admin Role for XML API access:

1. Select Panorama > Admin Roles.
2. Click Add to add a new Admin Role. The Admin Role Profile dialog opens.
3. Enter a name for the role in the Name field. For example, api-only-admin.
4. Select Panorama.
5. Disable all entries in the Web UI tab.
6. Enable all entries except Commit in the XML API tab.
7. Click OK to close the dialog box. A new Admin Role appears in the list with the name provided.
8. Click Commit to commit the changes to Panorama.
9. Assign this new Admin Role to the administrative account.