Role-based Panorama Admin Cannot Create 'Scheduled Config Export' Object

Symptom

A role-based Panorama administrator with “Scheduled Config Export” privilege is not able to create the Scheduled Config Export configuration (under Panorama > Scheduled Config Export).

Details

The admin role assigned to the role-based admin has “Scheduled config export” enabled, as shown below:

However, when the admin with this admin role assigned tries to create the scheduled config export object, the following error occurs:

Invalid location / Permission denied

Cause

Certain areas of the configuration are restricted to non-superuser admins for security purposes. For example, if a non-superuser (role-based admin) is granted full, unrestricted access to the config, then this admin would be able to see the phash (password hash) of other admins (and superusers) in plain text. This is the reason why a non-superuser is not permitted to configure the ‘Scheduled Config Export’ section.

owner: achitwadgi