Which type of administrative role must you assign to a firewall administrator account, if the account must include a custom set of firewall permissions?

The correct answer is A. Role-based. PAN-OS supports two categories of admin roles. Dynamic roles are predefined system roles (Superuser, Device Administrator, etc.) with fixed, non-customizable permission sets. Role-based (also called Admin Role profiles) allows administrators to define granular, custom…

Submitted by olafpl· Apr 18, 2026Device Management and Services

Question

Options

ARole-based
BMulti-Factor Authentication
CDynamic
DSAML

How the community answered

(35 responses)

A
89% (31)
B
3% (1)
C
6% (2)
D
3% (1)

Explanation

PAN-OS supports two categories of admin roles. Dynamic roles are predefined system roles (Superuser, Device Administrator, etc.) with fixed, non-customizable permission sets. Role-based (also called Admin Role profiles) allows administrators to define granular, custom permissions - specifying exactly which features, tabs, and operations the account can access. MFA (B) is an authentication factor, not a role type. SAML (D) is an identity federation protocol.

Topics

#Role-based Access Control#Administrator accounts#Permissions#User management

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice