An administrator wants to grant read-only access to all firewall settings, except administrator accounts, to a new-hire colleague in the IT department. Which dynamic role does the administrator…

The correct answer is A. Device administrator (read-only). Device administrator (read-only) Read-only access to all firewall settings except password profiles (no access) and administrator accounts (only the logged in account is visible). https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/firewall-administration/manage…

Submitted by katya_ua· Apr 18, 2026Deploy and Configure

Question

An administrator wants to grant read-only access to all firewall settings, except administrator accounts, to a new-hire colleague in the IT department. Which dynamic role does the administrator assign to the new-hire colleague?

Options

ADevice administrator (read-only)
BSystem administrator (read-only)
CFirewall administrator (read-only)
DSuperuser (read-only)

How the community answered

(41 responses)

A
93% (38)
C
2% (1)
D
5% (2)

Explanation

Device administrator (read-only) Read-only access to all firewall settings except password profiles (no access) and administrator accounts (only the logged in account is visible). https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/firewall-administration/manage- firewall-administrators/administrative-role-types

Topics

#Administrative Roles#Role-Based Access Control (RBAC)#Access Management

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice