Which Panorama objects restrict administrative access to specific device-groups?
Which Panorama objects restrict administrative access to specific device-groups?
Access domains in Panorama are used to restrict administrative access to specific device-groups. They allow the configuration of permissions so that administrators can only access certain device-groups, ensuring that they do not have unnecessary access to other parts of the network.
Option D Access domains control administrative access to specific Device Groups and templates, and also control the ability to switch context to the web interface of managed firewalls. https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/panorama-overview/role-based-access-control/access-domains.html
https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-overview/role-based-access-control/access-domains
Access domains
D is correct
D Links as below
to restrict access to device groups you should use access domains