Admin Users Created via CLI Are Not Shown in Web Interface

Admin Users Created via CLI Are Not Shown in Web Interface

18200

Created On 04/05/19 22:10 PM - Last Modified 04/08/19 15:04 PM

Administration

Device Management

PAN-OS

Panorama

Symptom

Admin user is created on the CLI of PAN-OS
Admin user does not appear on the web interface of the firewall or Panorama
On the CLI, you see the user created with no permission attributes:

admin@firewall> configure
Entering configuration mode
[edit]                         
                                                                                                                                               
admin@firewall# show mgt-config users 
users {
  test-user;
}
[edit]

Environment

Palo Alto Networks firewall or Panorama

Cause

Admin user created on the CLI without the permissions attribute defined will not be visible in the web interface.

Resolution

Create the admin user with the permissions attribute defined:

admin@PA-VM# set mgt-config users test-user permissions role-based superuser yes 

[edit]                                                                                                                                                                        
admin@PA-VM# show mgt-config users test-user 
test-user {
  permissions {
    role-based {
      superuser yes;
    }
  }
}
[edit]

Additional Information