When this is found please verify that we are using a user profile with a "Superuser (readonly)" or equivalent (see below) role to perform retrievals. Some of the role names in Palo Alto can be misleading "Device Administrator" might sound like it has all the permissions needed to perform a retrieval but it doesn't.
equivalent = custom role profile with the Config and Operational Requests Allowed for the XML API and superreader set for the command line.
Comments
0 comments
Article is closed for comments.