To manage Palo Alto Networks PAN-OS accounts, you need to specify a valid local administrative account and password. See Specifying a local administrative account for more information. The account used must be a superuser account.
For any account you add, you can also choose whether or not you want the Privileged Access Service to manage the account password. If you select Manage this credential, the Privileged Access Service automatically resets the password after the account and system are added and each time the account is checked in.
Note: If you select Manage this credential for Palo Alto Networks PAN-OS systems, keep in mind that the Privileged Access Service can only manage passwords for administrator accounts with local authentication (password). Accounts with an authentication profile set (including local user databases) are not supported.
For more information about password and system management for Palo Alto Networks PAN-OS systems, see the following topics: