: Access Domain Enhancements for Multi-Tenancy
Focus
Focus

Access Domain Enhancements for Multi-Tenancy

Table of Contents
End-of-Life (EoL)

Access Domain Enhancements for Multi-Tenancy

Allows Panorama™ administrators to view configuration and system logs, as well as some firewall functions and tasks, in multi-tenant environments.
To provide further visibility in to multi-tenant environments, PAN-OS 10.0 introduces the ability for Device Group and Template (DG&T) admins to view the configuration and systems logs for devices within their access domain. Additionally, DG&T admins can also view firewall configuration operations (partial commit, load, and revert), as well as monitor the Application Command Center (ACC) to gain additional visibility into the network traffic activity for devices in the access domain. To gain additional visibility, both the Panorama management server and the managed device must both be running PAN-OS 10.0, and the DG&T admin access domain can only include up to 256 managed devices. The DG&T admin is unable to view the logs, view configuration operations, or monitor the ACC for the devices in the access domain if the number of managed devices in the access domain exceeds 256 devices.
  1. Log in to the Panorama Web Interface.
  2. Configure an Access Domain.
  3. Configure a Device Group and Template Admin Role Profile.
  4. Configure a Panorama Administrator Account.
  5. Select CommitCommit to Panorama and Commit your configuration changes.
  6. Manage the firewalls in the access domain.
    1. Log in to the Panorama Web Interface using the DG&T admin credentials you created.
    2. Select MonitorLogsConfiguration or MonitorLogsSystem to view the configuration or system logs for the managed firewalls in the access domain.
    3. Select PanoramaConfig Audit and compare the configuration changes for managed firewalls in your access domain.
    4. Context switch to a managed firewall to perform firewall operations.
      • Select DeviceSetupOperations to Reboot Device or Shutdown Device.
      • Select DeviceSupport to Generate Tech Support File or Generate Stats Dump File.