Fortinet black logo

Creating an admin user

Copy Link
Copy Doc ID 4dfdb77b-9972-11eb-b70b-00505692583a:650437
Download PDF

Creating an admin user

To create a RADIUS administrator with 2FA:
  1. In FortiWeb, go to System > Admin > Administrators, and from the Create New dropdown select Administrator.
  2. Enter a username and password for the administrator.
  3. Select Remote User as the Type.
  4. Choose the previously created Admin User Group.
  5. Select the Access Profile for the administrator, and click OK.

Once completed, log into the FortiWeb GUI with the newly created RADIUS administrator credentials. Enter the token when prompted.

Successful authentication will provide the user with access to the FortiWeb, and will generate a login event on the FortiAuthenticator.

Creating a wildcard administrator account

Wildcard accounts can also be used in order to avoid specifying each user locally. When this option is enabled, any user included on the RADIUS server associated with the selected Admin User Group will be able to authenticate as an administrator on the FortiWeb.

To create a wildcard administrator account:
  1. Create a new administrator profile with a descriptive name.

    The name is for internal purposes only and is not used during authentication.

  2. Choose Remote User as the Type, and enable Wildcard.
  3. Choose the RADIUS Admin User Group previously created.
  4. Select an Access Profile, and click OK.

Creating an admin user

To create a RADIUS administrator with 2FA:
  1. In FortiWeb, go to System > Admin > Administrators, and from the Create New dropdown select Administrator.
  2. Enter a username and password for the administrator.
  3. Select Remote User as the Type.
  4. Choose the previously created Admin User Group.
  5. Select the Access Profile for the administrator, and click OK.

Once completed, log into the FortiWeb GUI with the newly created RADIUS administrator credentials. Enter the token when prompted.

Successful authentication will provide the user with access to the FortiWeb, and will generate a login event on the FortiAuthenticator.

Creating a wildcard administrator account

Wildcard accounts can also be used in order to avoid specifying each user locally. When this option is enabled, any user included on the RADIUS server associated with the selected Admin User Group will be able to authenticate as an administrator on the FortiWeb.

To create a wildcard administrator account:
  1. Create a new administrator profile with a descriptive name.

    The name is for internal purposes only and is not used during authentication.

  2. Choose Remote User as the Type, and enable Wildcard.
  3. Choose the RADIUS Admin User Group previously created.
  4. Select an Access Profile, and click OK.