The API supports the following types of Administrators
and Admin roles:
Dynamic roles: Superuser, Superuser
(readonly), Device admin, Device admin (readonly), Vsys admin, Vsys
admin (readonly)
Role-based Admins: Device, Vsys, Panorama.
Admin
Role profiles enable or disable features on the management interfaces
of the firewall or Panorama, XML API, web interface, and CLI. For
more details on Administrative Roles, see
Configure an Admin Role Profile.
As a best practice, set up a separate admin
account for XML API access.