nerdexam
Palo_Alto_Networks

PCNSE · Question #278

Which Panorama administrator types require the configuration of at least one access domain? (Choose two.)

The correct answer is C. Device Group E. Template Admin. In Panorama, access domains define which device groups and templates an administrator is permitted to manage. The 'Device Group and Template Admin' role (split in the exam choices into 'Device Group' and 'Template Admin') requires at least one access domain to be assigned…

Submitted by naveen.iyer· Apr 18, 2026Deploy and Configure

Question

Which Panorama administrator types require the configuration of at least one access domain? (Choose two.)

Options

  • ARole Based
  • BCustom Panorama Admin
  • CDevice Group
  • DDynamic
  • ETemplate Admin

How the community answered

(52 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    90% (47)
  • D
    6% (3)

Explanation

In Panorama, access domains define which device groups and templates an administrator is permitted to manage. The 'Device Group and Template Admin' role (split in the exam choices into 'Device Group' and 'Template Admin') requires at least one access domain to be assigned, because their scope of administration is explicitly bounded to the device groups and templates defined in those domains. Without an access domain, these role types have no devices or templates to manage. Superuser and full Panorama Admin roles have unrestricted access and do not require access domains. Role-based and Dynamic admin types are not Panorama-specific categories that mandate access domains.

Topics

#Panorama Administration#Access Control#Administrator Roles#Access Domains

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice