Superuser (read-only) is Unable to View Reports

PAN-OS 5.0

Issue

On PAN-OS 5.0 and earlier versions, superusers with "read only" rights are unable to view Custom Reports from the Monitor tab.

Workaround

The workaround is to create a custom admin role that only allows a custom report and everything else is either read-only or disabled per the user's requirement.

1. To create the custom admin role, on the WebUI navigate to Device Tab > Admin Roles and (allow custom report and set everything else as either read-only or disabled):
   
    
2. Go to Device > Administrator and click on the admin user with Superuser "read only" access and enable Role Based. This will give the user the option to choose the profile that has been created in the above step for Admin Roles
   :
    
3. Commit the changes, now the "read only" Superuser can successfully view the reports.

owner: bsyeda