Exam PCNSA topic 1 question 230 discussion

Answer is B and D. B. Admin Role - The set of permissions for the administrator. It is a custom role where you can specify what the admin can and cannot do. D. Access Domain - This is the set of devices or device groups, templates, or template stacks that the admin is allowed to access. Information on Access Domains - https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/panorama-overview/role-based-access-control/access-domains

If you look at Panorama and try to create a Device Group and Template admin, you'll see that you need a Access Domain and Admin Role.

Device Group and Template Admin type ->Access Domain to Administrator Role https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-web-interface-help/panorama-web-interface/panorama-administrators

disagree - https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-web-interface-help/panorama-web-interface/panorama-administrators answer is domain access and admin role For each access domain (up to 25) you want to assign to the administrator, Add an Access Domain from the drop-down (see Panorama > Access Domains) and then click the adjacent Admin Role cell and select a custom Device Group and Template administrator role from the drop-down (see Panorama > Managed Devices > Summary). When administrators with access to more than one domain log in to Panorama, an Access Domain drop-down appears in the footer of the web interface. Administrators can select any assigned Access Domain to filter the monitoring and configuration data that Panorama displays. The Access Domain selection also filters the firewalls that the Context drop-down displays.

The Answer is A and B study guide makes no reference of an access domain.