Which Panorama administrator types require the configuration of at least one access domain? (Choose two.)
Which Panorama administrator types require the configuration of at least one access domain? (Choose two.)
The Panorama administrator types that require at least one access domain to be configured are Custom Panorama Admin and Template Admin. Custom Panorama Admin roles need access domains to define and manage specific permissions related to access control over the managed elements. Similarly, Template Admin roles require access domains to control permissions over the configuration templates they manage. This ensures precise and compartmentalized control over network resources and administrative tasks within the Panorama management environment.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClETCA0 3.Create Administrator for Administrator Type "Device Group and Template Admin" and bind the access domain
C,E are correct I agree with Ab121213 provided link
Makes sense, access domain is some part of your installation. In Panorama there are two kinds of such parts - Templates(for device mgmt) and Device Groups(for traffic mgmt).
https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-overview/role-based-access-control/access-domains
C and E correct
Access domains allow you to control which permissions a specific administrator has when that administrator accesses a set of managed devices through Panorama. Access domains use Device Group and Template permission sets that you must define beforehand.
Answer is A, D
Access domains apply only to administrators with Device Group and Template roles.