Admin Roles - Terraform docs

[kklimonda-cl]

panos_admin_role (Resource)

Schema

Required

• location (Attributes) The location of this object. (see below for nested schema)
• name (String)

Optional

• description (String)
• role (Attributes) (see below for nested schema)

Nested Schema for location

Optional:

• shared (Boolean) Location in Shared Panorama
• template (Attributes) Located in a specific template (see below for nested schema)
• template_stack (Attributes) Located in a specific template stack (see below for nested schema)

Nested Schema for location.template

Optional:

• name (String) Specific Panorama template
• ngfw_device (String) The NGFW device
• panorama_device (String) Specific Panorama device

Nested Schema for location.template_stack

Optional:

• name (String) Specific Panorama template stack
• ngfw_device (String) The NGFW device
• panorama_device (String) Specific Panorama device

Nested Schema for role

Optional:

• device (Attributes) (see below for nested schema)
• vsys (Attributes) (see below for nested schema)

Nested Schema for role.device

Optional:

• cli (String)
• restapi (Attributes) (see below for nested schema)
• webui (Attributes) (see below for nested schema)
• xmlapi (Attributes) (see below for nested schema)

Nested Schema for role.device.restapi

Optional:

• device (Attributes) (see below for nested schema)
• network (Attributes) (see below for nested schema)
• objects (Attributes) (see below for nested schema)
• policies (Attributes) (see below for nested schema)
• system (Attributes) (see below for nested schema)

Nested Schema for role.device.restapi.device

Optional:

• email_server_profiles (String)
• http_server_profiles (String)
• ldap_server_profiles (String)
• log_interface_setting (String)
• snmp_trap_server_profiles (String)
• syslog_server_profiles (String)
• virtual_systems (String)

Nested Schema for role.device.restapi.network

Optional:

• aggregate_ethernet_interfaces (String)
• bfd_network_profiles (String)
• bgp_routing_profiles (String)
• dhcp_relays (String)
• dhcp_servers (String)
• dns_proxies (String)
• ethernet_interfaces (String)
• globalprotect_clientless_app_groups (String)
• globalprotect_clientless_apps (String)
• globalprotect_gateways (String)
• globalprotect_ipsec_crypto_network_profiles (String)
• globalprotect_mdm_servers (String)
• globalprotect_portals (String)
• gre_tunnels (String)
• ike_crypto_network_profiles (String)
• ike_gateway_network_profiles (String)
• interface_management_network_profiles (String)
• ipsec_crypto_network_profiles (String)
• ipsec_tunnels (String)
• lldp (String)
• lldp_network_profiles (String)
• logical_routers (String)
• loopback_interfaces (String)
• qos_interfaces (String)
• qos_network_profiles (String)
• sdwan_interface_profiles (String)
• sdwan_interfaces (String)
• tunnel_interfaces (String)
• tunnel_monitor_network_profiles (String)
• virtual_routers (String)
• virtual_wires (String)
• vlan_interfaces (String)
• vlans (String)
• zone_protection_network_profiles (String)
• zones (String)

Nested Schema for role.device.restapi.objects

Optional:

• address_groups (String)
• addresses (String)
• anti_spyware_security_profiles (String)
• antivirus_security_profiles (String)
• application_filters (String)
• application_groups (String)
• applications (String)
• authentication_enforcements (String)
• custom_data_patterns (String)
• custom_spyware_signatures (String)
• custom_url_categories (String)
• custom_vulnerability_signatures (String)
• data_filtering_security_profiles (String)
• decryption_profiles (String)
• devices (String)
• dos_protection_security_profiles (String)
• dynamic_user_groups (String)
• external_dynamic_lists (String)
• file_blocking_security_profiles (String)
• globalprotect_hip_objects (String)
• globalprotect_hip_profiles (String)
• gtp_protection_security_profiles (String)
• log_forwarding_profiles (String)
• packet_broker_profiles (String)
• regions (String)
• schedules (String)
• sctp_protection_security_profiles (String)
• sdwan_error_correction_profiles (String)
• sdwan_path_quality_profiles (String)
• sdwan_saas_quality_profiles (String)
• sdwan_traffic_distribution_profiles (String)
• security_profile_groups (String)
• service_groups (String)
• services (String)
• tags (String)
• url_filtering_security_profiles (String)
• vulnerability_protection_security_profiles (String)
• wildfire_analysis_security_profiles (String)

Nested Schema for role.device.restapi.policies

Optional:

• application_override_rules (String)
• authentication_rules (String)
• decryption_rules (String)
• dos_rules (String)
• nat_rules (String)
• network_packet_broker_rules (String)
• policy_based_forwarding_rules (String)
• qos_rules (String)
• sdwan_rules (String)
• security_rules (String)
• tunnel_inspection_rules (String)

Nested Schema for role.device.restapi.system

Optional:

• configuration (String)

Nested Schema for role.device.webui

Optional:

• acc (String)
• commit (Attributes) (see below for nested schema)
• dashboard (String)
• device (Attributes) (see below for nested schema)
• global (Attributes) (see below for nested schema)
• monitor (Attributes) (see below for nested schema)
• network (Attributes) (see below for nested schema)
• objects (Attributes) (see below for nested schema)
• operations (Attributes) (see below for nested schema)
• policies (Attributes) (see below for nested schema)
• privacy (Attributes) (see below for nested schema)
• save (Attributes) (see below for nested schema)
• tasks (String)
• validate (String)

Nested Schema for role.device.webui.commit

Optional:

• commit_for_other_admins (String)
• device (String)
• object_level_changes (String)

Nested Schema for role.device.webui.device

Optional:

• access_domain (String)
• admin_roles (String)
• administrators (String)
• authentication_profile (String)
• authentication_sequence (String)
• block_pages (String)
• certificate_management (Attributes) (see below for nested schema)
• config_audit (String)
• data_redistribution (String)
• device_quarantine (String)
• dhcp_syslog_server (String)
• dynamic_updates (String)
• global_protect_client (String)
• high_availability (String)
• licenses (String)
• local_user_database (Attributes) (see below for nested schema)
• log_fwd_card (String)
• log_settings (Attributes) (see below for nested schema)
• master_key (String)
• plugins (String)
• policy_recommendations (Attributes) (see below for nested schema)
• scheduled_log_export (String)
• server_profile (Attributes) (see below for nested schema)
• setup (Attributes) (see below for nested schema)
• shared_gateways (String)
• software (String)
• support (String)
• troubleshooting (String)
• user_identification (String)
• virtual_systems (String)
• vm_info_source (String)

Nested Schema for role.device.webui.device.certificate_management

Optional:

• certificate_profile (String)
• certificates (String)
• ocsp_responder (String)
• scep (String)
• ssh_service_profile (String)
• ssl_decryption_exclusion (String)
• ssl_tls_service_profile (String)

Nested Schema for role.device.webui.device.local_user_database

Optional:

• user_groups (String)
• users (String)

Nested Schema for role.device.webui.device.log_settings

Optional:

• cc_alarm (String)
• config (String)
• correlation (String)
• globalprotect (String)
• hipmatch (String)
• iptag (String)
• manage_log (String)
• system (String)
• user_id (String)

Nested Schema for role.device.webui.device.policy_recommendations

Optional:

• iot (String)
• saas (String)

Nested Schema for role.device.webui.device.server_profile

Optional:

• dns (String)
• email (String)
• http (String)
• kerberos (String)
• ldap (String)
• mfa (String)
• netflow (String)
• radius (String)
• saml_idp (String)
• scp (String)
• snmp_trap (String)
• syslog (String)
• tacplus (String)

Nested Schema for role.device.webui.device.setup

Optional:

• content_id (String)
• hsm (String)
• interfaces (String)
• management (String)
• operations (String)
• services (String)
• session (String)
• telemetry (String)
• wildfire (String)

Nested Schema for role.device.webui.global

Optional:

• system_alarms (String)

Nested Schema for role.device.webui.monitor

Optional:

• app_scope (String)
• application_reports (String)
• automated_correlation_engine (Attributes) (see below for nested schema)
• block_ip_list (String)
• botnet (String)
• custom_reports (Attributes) (see below for nested schema)
• external_logs (String)
• gtp_reports (String)
• logs (Attributes) (see below for nested schema)
• packet_capture (String)
• pdf_reports (Attributes) (see below for nested schema)
• sctp_reports (String)
• session_browser (String)
• threat_reports (String)
• traffic_reports (String)
• url_filtering_reports (String)
• view_custom_reports (String)

Nested Schema for role.device.webui.monitor.automated_correlation_engine

Optional:

• correlated_events (String)
• correlation_objects (String)

Nested Schema for role.device.webui.monitor.custom_reports

Optional:

• application_statistics (String)
• auth (String)
• data_filtering_log (String)
• decryption_log (String)
• decryption_summary (String)
• globalprotect (String)
• gtp_log (String)
• gtp_summary (String)
• hipmatch (String)
• iptag (String)
• sctp_log (String)
• sctp_summary (String)
• threat_log (String)
• threat_summary (String)
• traffic_log (String)
• traffic_summary (String)
• tunnel_log (String)
• tunnel_summary (String)
• url_log (String)
• url_summary (String)
• userid (String)
• wildfire_log (String)

Nested Schema for role.device.webui.monitor.logs

Optional:

• alarm (String)
• authentication (String)
• configuration (String)
• data_filtering (String)
• decryption (String)
• globalprotect (String)
• gtp (String)
• hipmatch (String)
• iptag (String)
• sctp (String)
• system (String)
• threat (String)
• traffic (String)
• tunnel (String)
• url (String)
• userid (String)
• wildfire (String)

Nested Schema for role.device.webui.monitor.pdf_reports

Optional:

• email_scheduler (String)
• manage_pdf_summary (String)
• pdf_summary_reports (String)
• report_groups (String)
• saas_application_usage_report (String)
• user_activity_report (String)

Nested Schema for role.device.webui.network

Optional:

• dhcp (String)
• dns_proxy (String)
• global_protect (Attributes) (see below for nested schema)
• gre_tunnels (String)
• interfaces (String)
• ipsec_tunnels (String)
• lldp (String)
• network_profiles (Attributes) (see below for nested schema)
• qos (String)
• routing (Attributes) (see below for nested schema)
• sdwan_interface_profile (String)
• secure_web_gateway (String)
• virtual_routers (String)
• virtual_wires (String)
• vlans (String)
• zones (String)

Nested Schema for role.device.webui.network.global_protect

Optional:

• clientless_app_groups (String)
• clientless_apps (String)
• gateways (String)
• mdm (String)
• portals (String)

Nested Schema for role.device.webui.network.network_profiles

Optional:

• bfd_profile (String)
• gp_app_ipsec_crypto (String)
• ike_crypto (String)
• ike_gateways (String)
• interface_mgmt (String)
• ipsec_crypto (String)
• lldp_profile (String)
• qos_profile (String)
• tunnel_monitor (String)
• zone_protection (String)

Nested Schema for role.device.webui.network.routing

Optional:

• logical_routers (String)
• routing_profiles (Attributes) (see below for nested schema)

Nested Schema for role.device.webui.network.routing.routing_profiles

Optional:

• bfd (String)
• bgp (String)
• filters (String)
• multicast (String)
• ospf (String)
• ospfv3 (String)
• ripv2 (String)

Nested Schema for role.device.webui.objects

Optional:

• address_groups (String)
• addresses (String)
• application_filters (String)
• application_groups (String)
• applications (String)
• authentication (String)
• custom_objects (Attributes) (see below for nested schema)
• decryption (Attributes) (see below for nested schema)
• devices (String)
• dynamic_block_lists (String)
• dynamic_user_groups (String)
• global_protect (Attributes) (see below for nested schema)
• log_forwarding (String)
• packet_broker_profile (String)
• regions (String)
• schedules (String)
• sdwan (Attributes) (see below for nested schema)
• security_profile_groups (String)
• security_profiles (Attributes) (see below for nested schema)
• service_groups (String)
• services (String)
• tags (String)

Nested Schema for role.device.webui.objects.custom_objects

Optional:

• data_patterns (String)
• spyware (String)
• url_category (String)
• vulnerability (String)

Nested Schema for role.device.webui.objects.decryption

Optional:

• decryption_profile (String)

Nested Schema for role.device.webui.objects.global_protect

Optional:

• hip_objects (String)
• hip_profiles (String)

Nested Schema for role.device.webui.objects.sdwan

Optional:

• sdwan_dist_profile (String)
• sdwan_error_correction_profile (String)
• sdwan_profile (String)
• sdwan_saas_quality_profile (String)

Nested Schema for role.device.webui.objects.security_profiles

Optional:

• anti_spyware (String)
• antivirus (String)
• data_filtering (String)
• dos_protection (String)
• file_blocking (String)
• gtp_protection (String)
• sctp_protection (String)
• url_filtering (String)
• vulnerability_protection (String)
• wildfire_analysis (String)

Nested Schema for role.device.webui.operations

Optional:

• download_core_files (String)
• download_pcap_files (String)
• generate_stats_dump_file (String)
• generate_tech_support_file (String)
• reboot (String)

Nested Schema for role.device.webui.policies

Optional:

• application_override_rulebase (String)
• authentication_rulebase (String)
• dos_rulebase (String)
• nat_rulebase (String)
• network_packet_broker_rulebase (String)
• pbf_rulebase (String)
• qos_rulebase (String)
• rule_hit_count_reset (String)
• sdwan_rulebase (String)
• security_rulebase (String)
• ssl_decryption_rulebase (String)
• tunnel_inspect_rulebase (String)

Nested Schema for role.device.webui.privacy

Optional:

• show_full_ip_addresses (String)
• show_user_names_in_logs_and_reports (String)
• view_pcap_files (String)

Nested Schema for role.device.webui.save

Optional:

• object_level_changes (String)
• partial_save (String)
• save_for_other_admins (String)

Nested Schema for role.device.xmlapi

Optional:

• commit (String)
• config (String)
• export (String)
• import (String)
• iot (String)
• log (String)
• op (String)
• report (String)
• user_id (String)

Nested Schema for role.vsys

Optional:

• cli (String)
• restapi (Attributes) (see below for nested schema)
• webui (Attributes) (see below for nested schema)
• xmlapi (Attributes) (see below for nested schema)

Nested Schema for role.vsys.restapi

Optional:

• device (Attributes) (see below for nested schema)
• network (Attributes) (see below for nested schema)
• objects (Attributes) (see below for nested schema)
• policies (Attributes) (see below for nested schema)
• system (Attributes) (see below for nested schema)

Nested Schema for role.vsys.restapi.device

Optional:

• email_server_profiles (String)
• http_server_profiles (String)
• ldap_server_profiles (String)
• log_interface_setting (String)
• snmp_trap_server_profiles (String)
• syslog_server_profiles (String)
• virtual_systems (String)

Nested Schema for role.vsys.restapi.network

Optional:

• globalprotect_clientless_app_groups (String)
• globalprotect_clientless_apps (String)
• globalprotect_gateways (String)
• globalprotect_mdm_servers (String)
• globalprotect_portals (String)
• sdwan_interface_profiles (String)
• zones (String)

Nested Schema for role.vsys.restapi.objects

Optional:

• address_groups (String)
• addresses (String)
• anti_spyware_security_profiles (String)
• antivirus_security_profiles (String)
• application_filters (String)
• application_groups (String)
• applications (String)
• authentication_enforcements (String)
• custom_data_patterns (String)
• custom_spyware_signatures (String)
• custom_url_categories (String)
• custom_vulnerability_signatures (String)
• data_filtering_security_profiles (String)
• decryption_profiles (String)
• devices (String)
• dos_protection_security_profiles (String)
• dynamic_user_groups (String)
• external_dynamic_lists (String)
• file_blocking_security_profiles (String)
• globalprotect_hip_objects (String)
• globalprotect_hip_profiles (String)
• gtp_protection_security_profiles (String)
• log_forwarding_profiles (String)
• packet_broker_profiles (String)
• regions (String)
• schedules (String)
• sctp_protection_security_profiles (String)
• sdwan_error_correction_profiles (String)
• sdwan_path_quality_profiles (String)
• sdwan_saas_quality_profiles (String)
• sdwan_traffic_distribution_profiles (String)
• security_profile_groups (String)
• service_groups (String)
• services (String)
• tags (String)
• url_filtering_security_profiles (String)
• vulnerability_protection_security_profiles (String)
• wildfire_analysis_security_profiles (String)

Nested Schema for role.vsys.restapi.policies

Optional:

• application_override_rules (String)
• authentication_rules (String)
• decryption_rules (String)
• dos_rules (String)
• nat_rules (String)
• network_packet_broker_rules (String)
• policy_based_forwarding_rules (String)
• qos_rules (String)
• sdwan_rules (String)
• security_rules (String)
• tunnel_inspection_rules (String)

Nested Schema for role.vsys.restapi.system

Optional:

• configuration (String)

Nested Schema for role.vsys.webui

Optional:

• acc (String)
• commit (Attributes) (see below for nested schema)
• dashboard (String)
• device (Attributes) (see below for nested schema)
• monitor (Attributes) (see below for nested schema)
• network (Attributes) (see below for nested schema)
• objects (Attributes) (see below for nested schema)
• operations (Attributes) (see below for nested schema)
• policies (Attributes) (see below for nested schema)
• privacy (Attributes) (see below for nested schema)
• save (Attributes) (see below for nested schema)
• tasks (String)
• validate (String)

Nested Schema for role.vsys.webui.commit

Optional:

• commit_for_other_admins (String)
• virtual_systems (String)

Nested Schema for role.vsys.webui.device

Optional:

• administrators (String)
• authentication_profile (String)
• authentication_sequence (String)
• block_pages (String)
• certificate_management (Attributes) (see below for nested schema)
• data_redistribution (String)
• device_quarantine (String)
• dhcp_syslog_server (String)
• local_user_database (Attributes) (see below for nested schema)
• log_settings (Attributes) (see below for nested schema)
• policy_recommendations (Attributes) (see below for nested schema)
• server_profile (Attributes) (see below for nested schema)
• setup (Attributes) (see below for nested schema)
• troubleshooting (String)
• user_identification (String)
• vm_info_source (String)

Nested Schema for role.vsys.webui.device.certificate_management

Optional:

• certificate_profile (String)
• certificates (String)
• ocsp_responder (String)
• scep (String)
• ssh_service_profile (String)
• ssl_decryption_exclusion (String)
• ssl_tls_service_profile (String)

Nested Schema for role.vsys.webui.device.local_user_database

Optional:

• user_groups (String)
• users (String)

Nested Schema for role.vsys.webui.device.log_settings

Optional:

• config (String)
• correlation (String)
• globalprotect (String)
• hipmatch (String)
• iptag (String)
• system (String)
• user_id (String)

Nested Schema for role.vsys.webui.device.policy_recommendations

Optional:

• iot (String)
• saas (String)

Nested Schema for role.vsys.webui.device.server_profile

Optional:

• dns (String)
• email (String)
• http (String)
• kerberos (String)
• ldap (String)
• mfa (String)
• netflow (String)
• radius (String)
• saml_idp (String)
• scp (String)
• snmp_trap (String)
• syslog (String)
• tacplus (String)

Nested Schema for role.vsys.webui.device.setup

Optional:

• content_id (String)
• hsm (String)
• interfaces (String)
• management (String)
• operations (String)
• services (String)
• session (String)
• telemetry (String)
• wildfire (String)

Nested Schema for role.vsys.webui.monitor

Optional:

• app_scope (String)
• automated_correlation_engine (Attributes) (see below for nested schema)
• block_ip_list (String)
• custom_reports (Attributes) (see below for nested schema)
• external_logs (String)
• logs (Attributes) (see below for nested schema)
• pdf_reports (Attributes) (see below for nested schema)
• session_browser (String)
• view_custom_reports (String)

Nested Schema for role.vsys.webui.monitor.automated_correlation_engine

Optional:

• correlated_events (String)
• correlation_objects (String)

Nested Schema for role.vsys.webui.monitor.custom_reports

Optional:

• application_statistics (String)
• auth (String)
• data_filtering_log (String)
• decryption_log (String)
• decryption_summary (String)
• globalprotect (String)
• gtp_log (String)
• gtp_summary (String)
• hipmatch (String)
• iptag (String)
• sctp_log (String)
• sctp_summary (String)
• threat_log (String)
• threat_summary (String)
• traffic_log (String)
• traffic_summary (String)
• tunnel_log (String)
• tunnel_summary (String)
• url_log (String)
• url_summary (String)
• userid (String)
• wildfire_log (String)

Nested Schema for role.vsys.webui.monitor.logs

Optional:

• authentication (String)
• data_filtering (String)
• decryption (String)
• globalprotect (String)
• gtp (String)
• hipmatch (String)
• iptag (String)
• sctp (String)
• threat (String)
• traffic (String)
• tunnel (String)
• url (String)
• userid (String)
• wildfire (String)

Nested Schema for role.vsys.webui.monitor.pdf_reports

Optional:

• email_scheduler (String)
• manage_pdf_summary (String)
• pdf_summary_reports (String)
• report_groups (String)
• saas_application_usage_report (String)
• user_activity_report (String)

Nested Schema for role.vsys.webui.network

Optional:

• global_protect (Attributes) (see below for nested schema)
• sdwan_interface_profile (String)
• zones (String)

Nested Schema for role.vsys.webui.network.global_protect

Optional:

• clientless_app_groups (String)
• clientless_apps (String)
• gateways (String)
• mdm (String)
• portals (String)

Nested Schema for role.vsys.webui.objects

Optional:

• address_groups (String)
• addresses (String)
• application_filters (String)
• application_groups (String)
• applications (String)
• authentication (String)
• custom_objects (Attributes) (see below for nested schema)
• decryption (Attributes) (see below for nested schema)
• devices (String)
• dynamic_block_lists (String)
• dynamic_user_groups (String)
• global_protect (Attributes) (see below for nested schema)
• log_forwarding (String)
• packet_broker_profile (String)
• regions (String)
• schedules (String)
• sdwan (Attributes) (see below for nested schema)
• security_profile_groups (String)
• security_profiles (Attributes) (see below for nested schema)
• service_groups (String)
• services (String)
• tags (String)

Nested Schema for role.vsys.webui.objects.custom_objects

Optional:

• data_patterns (String)
• spyware (String)
• url_category (String)
• vulnerability (String)

Nested Schema for role.vsys.webui.objects.decryption

Optional:

• decryption_profile (String)

Nested Schema for role.vsys.webui.objects.global_protect

Optional:

• hip_objects (String)
• hip_profiles (String)

Nested Schema for role.vsys.webui.objects.sdwan

Optional:

• sdwan_dist_profile (String)
• sdwan_error_correction_profile (String)
• sdwan_profile (String)
• sdwan_saas_quality_profile (String)

Nested Schema for role.vsys.webui.objects.security_profiles

Optional:

• anti_spyware (String)
• antivirus (String)
• data_filtering (String)
• dos_protection (String)
• file_blocking (String)
• gtp_protection (String)
• sctp_protection (String)
• url_filtering (String)
• vulnerability_protection (String)
• wildfire_analysis (String)

Nested Schema for role.vsys.webui.operations

Optional:

• download_core_files (String)
• download_pcap_files (String)
• generate_stats_dump_file (String)
• generate_tech_support_file (String)
• reboot (String)

Nested Schema for role.vsys.webui.policies

Optional:

• application_override_rulebase (String)
• authentication_rulebase (String)
• dos_rulebase (String)
• nat_rulebase (String)
• network_packet_broker_rulebase (String)
• pbf_rulebase (String)
• qos_rulebase (String)
• rule_hit_count_reset (String)
• sdwan_rulebase (String)
• security_rulebase (String)
• ssl_decryption_rulebase (String)
• tunnel_inspect_rulebase (String)

Nested Schema for role.vsys.webui.privacy

Optional:

• show_full_ip_addresses (String)
• show_user_names_in_logs_and_reports (String)
• view_pcap_files (String)

Nested Schema for role.vsys.webui.save

Optional:

• object_level_changes (String)
• partial_save (String)
• save_for_other_admins (String)

Nested Schema for role.vsys.xmlapi

Optional:

• commit (String)
• config (String)
• export (String)
• import (String)
• iot (String)
• log (String)
• op (String)
• report (String)
• user_id (String)