Give
Administrators Access to the CLI
Administrative accounts specify roles and authentication
methods for the administrators of Palo Alto Networks firewalls.
Every Palo Alto Networks firewall has a predefined default administrative
account (admin) that provides full read-write access (also known
as superuser access) to the firewall. As a best practice, create an
administrative account for each person who will be performing configuration tasks
on the firewall or Panorama so that you have an audit trail of changes.