Fortinet black logo

Administration Guide

Permissions

Permissions

The below table lists the default permissions for the predefined administrator profiles.

When Read-Write is selected, the user can view and make changes to the FortiAnalyzer system. When Read-Only is selected, the user can only view information. When None is selected, the user can neither view or make changes to the FortiAnalyzer system.

Setting

Predefined Administrator Profile

Super User

Standard User

Restricted User

System Settings

system-setting

Read-Write

None

None

Administrative Domain

adom-switch

Read-Write

Read-Write

None

Device Manager

device-manager

Read-Write

Read-Write

Read-Only

Add/Delete/Edit Devices/Groups

device-op

Read-Write

Read-Write

None

Log View/FortiView/SOC

log-viewer

Read-Write

Read-Write

Read-Only

Incidents & Events

event-management

Read-Write

Read-Write

Read-Only

Reports

report-viewer

Read-Write

Read-Write

Read-Only

FortiRecorder

Read-Write

Read-Write

None

CLI only settings

device-wan-link-load-balance

Read-Write

Read-Write

Read-Only

device-ap

Read-Write

Read-Write

Read-Only

device-forticlient

Read-Write

Read-Write

Read-Only

device-fortiswitch

Read-Write

Read-Write

Read-Only

realtime-monitor

Read-Write

Read-Write

Read-Only

Permissions

The below table lists the default permissions for the predefined administrator profiles.

When Read-Write is selected, the user can view and make changes to the FortiAnalyzer system. When Read-Only is selected, the user can only view information. When None is selected, the user can neither view or make changes to the FortiAnalyzer system.

Setting

Predefined Administrator Profile

Super User

Standard User

Restricted User

System Settings

system-setting

Read-Write

None

None

Administrative Domain

adom-switch

Read-Write

Read-Write

None

Device Manager

device-manager

Read-Write

Read-Write

Read-Only

Add/Delete/Edit Devices/Groups

device-op

Read-Write

Read-Write

None

Log View/FortiView/SOC

log-viewer

Read-Write

Read-Write

Read-Only

Incidents & Events

event-management

Read-Write

Read-Write

Read-Only

Reports

report-viewer

Read-Write

Read-Write

Read-Only

FortiRecorder

Read-Write

Read-Write

None

CLI only settings

device-wan-link-load-balance

Read-Write

Read-Write

Read-Only

device-ap

Read-Write

Read-Write

Read-Only

device-forticlient

Read-Write

Read-Write

Read-Only

device-fortiswitch

Read-Write

Read-Write

Read-Only

realtime-monitor

Read-Write

Read-Write

Read-Only