Which two actions can the administrative role called "vsysadmin" perform? (Choose two)

The correct answer is B. Commit changes made to the candidate configuration of the assigned vsys C. Create and edit Security policies and security profiles for only the assigned vsys. The vsysadmin role in Palo Alto Networks firewalls is a virtual system (vsys)-specific administrative role with limited privileges. It can commit changes to the candidate configuration of the assigned vsys (Option B) and create/edit Security policies and profiles specific to…

Submitted by thandi_sa· Apr 18, 2026Core Concepts

Question

Options

AConfigure resource limits for the NGFW system
BCommit changes made to the candidate configuration of the assigned vsys
CCreate and edit Security policies and security profiles for only the assigned vsys
DConfigure interfaces and subinterfaces that exist in the assigned vsys

How the community answered

(43 responses)

A
5% (2)
B
88% (38)
D
7% (3)

Explanation

The vsysadmin role in Palo Alto Networks firewalls is a virtual system (vsys)-specific administrative role with limited privileges. It can commit changes to the candidate configuration of the assigned vsys (Option B) and create/edit Security policies and profiles specific to that vsys (Option C). This role is designed for multi-tenant environments where administrators manage only their assigned virtual systems.

Topics

#Administrative Roles#Virtual Systems (vsys)#Role-Based Access Control (RBAC)#Security Policy Management

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice