How to Create Management Users, Assign Roles, and Change Password from the PAN-OS CLI

How to Create Management Users, Assign Roles, and Change Password from the PAN-OS CLI

198430
Created On 09/25/18 17:30 PM - Last Modified 01/09/21 04:10 AM


Symptom


Perform the following actions via the PAN-OS CLI:
  • Create Users
  • Assign Roles
  • Change Passwords


Environment


  • Any PAN-OS
  • Palo Alto Firewall.


Resolution


Creating/Adding Users

  1. Log in to the CLI
  2. Go into configure mode:
> configure
  1. Create/Add a management user and assign a password
# set mgt-config users <name> password

Note: If the <name> does not exist, then the user will be created.
  1. Set the role for the specified user
    # set mgt-config users <name> permissions role-based <role profile>
    custom
    deviceadmin
    devicereader
    superreader
    superuser
  2. Commit and then exit the configuration mode.
    # commit
    # exit
To Change the password for a user
  1. Go into configure mode:
> configure
  1. Enter the new password that will override the existing one:
# set mgt-config users admin password
  1. Commit and exit the configuration mode.
# commit
# exit


WebGUI

For information on performing these steps in the Web GUI, please see the PAN-OS Administrator's guide



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFrCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language