Palo Alto Networks Firewall permission requirements

The user name credential that Trust Protection Foundation uses for authentication must be a Palo Alto Networks user who has been assigned to an Admin Role Profile with at least Configuration, Operational Requests, Commit and Import privileges to the XML API.