12- Palo Alto TACACS+ with Cisco ISE | Role Based Access Control

This video shows how to configure Role Based Access Control on Palo Alto Firewall with Cisco Identity Services Engine 3.3. You create admin roles on Palo Alto firewall and inside ISE we call thes profile to be applied on admin users inside ISE, when they try to access/mange firewall.
Here we have created two profiles, one for security engineer one for support staff. The security engineer will have full access, while support staff will only have monitoring access for Palo Alto Firewall.