Palo Alto Networks Knowledgebase: How to Create Management Users, Assign Roles, and Change Password from the PAN-OS CLI

How to Create Management Users, Assign Roles, and Change Password from the PAN-OS CLI

24548
Created On 08/05/19 19:22 PM - Last Updated 08/05/19 19:48 PM
Device Management Initial Configuration Installation QoS Zone and DoS Protection
Resolution

Overview

This document describes the CLI commands to add/create management users, assign them roles, and set their passwords.

 

Steps

Creating/Adding Users

  1. Log in to the CLI
  2. Go into configure mode:
    > configure
  3. Create/Add a management user and assign a password
    # set mgt-config users <name> password
    Note: If the <name> does not exist, then the user will be created.
  4. Set the role for the specified user
    # set mgt-config users <name> permissions role-based <role profile>
    custom
    deviceadmin
    devicereader
    superreader
    superuser
  5. Commit
    # commit

 

Change the password for a user

  1. Go into configure mode:
    > configure
  2. Enter the new password that will override the existing one:
    # set mgt-config users admin password
  3. Commit
    # commit

 

WebGUI

For information on performing these steps in the WebGUI, All of the information describing how to create granular Admin Role profiles is included inside of the Admin (Administrator's) guides for each version.  I have listed them below for your convenience:

 

PAN-OS 7.0 Administrator's Guide

 

PAN-OS 7.1 Administrator's Guide

 

PAN-OS 8.0 Administrator's Guide

 

owner: sraghunandan



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFrCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language