Palo Alto Networks Knowledgebase: Superuser (read-only) is Unable to View Reports

Superuser (read-only) is Unable to View Reports

6693
Created On 02/07/19 23:45 PM - Last Updated 02/07/19 23:45 PM
Device Management Initial Configuration Installation QoS Zone and DoS Protection
Resolution

PAN-OS 5.0

 

Issue

On PAN-OS 5.0 and earlier versions, superusers with "read only" rights are unable to view Custom Reports from the Monitor tab.

 

Workaround

The workaround is to create a custom admin role that only allows a custom report and everything else is either read-only or disabled per the user's requirement.

  1. To create the custom admin role, on the WebUI navigate to Device Tab > Admin Roles and (allow custom report and set everything else as either read-only or disabled):
    re.PNG

  2. Go to Device > Administrator and click on the admin user with Superuser "read only" access and enable Role Based. This will give the user the option to choose the profile that has been created in the above step for Admin Roles
    :17.PNG

  3. Commit the changes, now the "read only" Superuser can successfully view the reports.

 

owner: bsyeda



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CltRCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language