Context switch fails with error: VSYS Admin Role for the admin has not been defined

Context switch fails with error: VSYS Admin Role for the admin has not been defined

856
Created On 06/15/23 17:04 PM - Last Modified 08/19/25 22:08 PM


Symptom


  • Context switch from Panorama to managed firewall fails with error "VSYS Admin Role for the admin has not been defined"

error.png

Environment


  • Panorama managed Firewalls
  • PANOS-10.0.X
  • Context Switch

Cause


The context switch configuration has changed in PAN-OS 10.0.x and later versions.

Resolution


Use the following steps to have the context switch configured correctly.

  1. Configure admin roles under Under GUI: Templates > Device > Admin roles:

    admin roles in template.png

 

  1. The Admin roles used in Device template should be used in Context Switch (Panorama > Admin Roles > Context Switch) as shown below, role1 and role2 is used as example below :

    roles in panorama.png

 

  1. Define the Panorama's admin role under Administrator > Administrator type : Device Group and Template Admin:

    admin with admin role defined.png
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000bq4UCAQ&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail