nerdexam
Palo_Alto_Networks

PCNSE · Question #850

For company compliance purposes, three new contractors will be working with different device groups in their hierarchy to deploy policies and objects. Which type of role-based access is most…

The correct answer is A. Create a Device Group and Template Admin. The Device Group and Template Admin role is tailored for managing specific device groups and templates in Panorama, allowing contractors to deploy policies and objects within their assigned scope without broader administrative access. This aligns with compliance by restricting…

Submitted by cyberguy42· Apr 18, 2026Deploy and Configure

Question

For company compliance purposes, three new contractors will be working with different device groups in their hierarchy to deploy policies and objects. Which type of role-based access is most appropriate for this project?

Options

  • ACreate a Device Group and Template Admin
  • BCreate a Dynamic Admin with the Panorama Administrator role
  • CCreate a Dynamic Read-only Superuser
  • DCreate a Custom Panorama Admin

How the community answered

(23 responses)
  • A
    87% (20)
  • B
    9% (2)
  • C
    4% (1)

Explanation

The Device Group and Template Admin role is tailored for managing specific device groups and templates in Panorama, allowing contractors to deploy policies and objects within their assigned scope without broader administrative access. This aligns with compliance by restricting privileges.

Topics

#Role-Based Access Control#Panorama Administration#Device Groups#Administrator Roles

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice