When creating a Panorama administrator type of Device Group and Template Admin, which two things must you create first? (Choose two.)
When creating a Panorama administrator type of Device Group and Template Admin, which two things must you create first? (Choose two.)
When creating a Panorama administrator type of Device Group and Template Admin, the two essential components that need to be created first are an admin role and an access domain. The admin role defines the set of permissions for the administrator, specifying what actions they are permitted or restricted from performing. The access domain determines the specific devices, device groups, templates, or template stacks that the administrator can access. Both of these settings are fundamental in establishing the scope and permissions for the administrator within the Panorama environment.
Device Group and Template Admin type ->Access Domain to Administrator Role https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-web-interface-help/panorama-web-interface/panorama-administrators
If you look at Panorama and try to create a Device Group and Template admin, you'll see that you need a Access Domain and Admin Role.
The Answer is A and B study guide makes no reference of an access domain.
Agreed
Answer is B and D. B. Admin Role - The set of permissions for the administrator. It is a custom role where you can specify what the admin can and cannot do. D. Access Domain - This is the set of devices or device groups, templates, or template stacks that the admin is allowed to access. Information on Access Domains - https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/panorama-overview/role-based-access-control/access-domains
disagree - https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-web-interface-help/panorama-web-interface/panorama-administrators answer is domain access and admin role For each access domain (up to 25) you want to assign to the administrator, Add an Access Domain from the drop-down (see Panorama > Access Domains) and then click the adjacent Admin Role cell and select a custom Device Group and Template administrator role from the drop-down (see Panorama > Managed Devices > Summary). When administrators with access to more than one domain log in to Panorama, an Access Domain drop-down appears in the footer of the web interface. Administrators can select any assigned Access Domain to filter the monitoring and configuration data that Panorama displays. The Access Domain selection also filters the firewalls that the Context drop-down displays.