Administrative accounts specify roles and authentication methods for the administrators of Palo Alto Networks firewalls. Every Palo Alto Networks firewall has a predefined default administrative account (admin) that provides full read-write access (also known as superuser access) to the firewall. As a best practice, create an administrative account for each person who will be performing configuration tasks on the firewall or Panorama so that you have an audit trail of changes.