Fortinet black logo

Admin Profiles

Copy Link
Copy Doc ID e09daf98-5af9-11e9-81a4-00505692583a:86832
Download PDF

Admin Profiles

Administrator profiles are used to control administrator access privileges to system features. Profiles are assigned to administrator accounts when an administrator is created.

There is one predefined administrator profile, which cannot be modified or deleted:

  • Super Admin: All functionality is accessible

Only the Super Admin user can create, edit, and delete administrator profiles. New users can create, edit, and delete administrator profiles if they are assigned the Read Write privilege in System > Admin Profiles page.

Settings for Menu Access:

Read Write

User can view and make changes to the system.

None

User cannot view or make changes to the system.

Settings for CLI Commands:

Execute

User can execute the CLI command.

None

User cannot execute the CLI command.

To create a new Administrator Profile:
  1. Go to System > Admin Profiles.
  2. Click Create New.
  3. Specify the Profile Name.
  4. Add a Comment.
  5. Specify the privileges for the Menu Access. Select None or Read Write for the following features:
    • Dashboard
      • Dashboard
    • Deception
      • VM Images
      • Monitored Network
      • Wizard
      • Deception Status
      • Deception Map
      • Whitelist
    • Incident
      • Analysis
      • Campaign
      • Attack Map
    • Fabric
      • Blocking
      • Fabric Status
    • Network
      • Interfaces
      • System DNS
      • System Routing
    • System
      • Administrators
      • Admin Profiles
      • Certificates
      • LDAP Servers
      • RADUIS Servers
      • Mail Server
      • SNMP
      • Login Disclaimer
      • System Settings
      • Table Customization
      • test-network
      • fdn-pkg
    • Log
      • All Events
      • Log Servers
  6. Specify the privileges for the CLI Commands. Select None or Read Write for the following features:
    • Configuration
      • Set
      • Unset
    • System
      • Reboot
      • Shutdown
      • Reset Configuration
      • Factory Reset
      • Firmware Upgrade
      • Reset Widgets
      • IP Tables
      • Set Confirm ID for Windows VM
      • List VM License
      • Show VM Status
      • VM reset
      • Set Maintainer
      • Set Timeout for Remote Auth
      • Log Purge
    • Utilities
      • TCP Dump
      • Trace Route
    • Diagnostics
      • Disk Attributes
      • Disk Errors
      • Disk Health
      • Disk Info
      • Raid Hardware Info
  7. Click Save.

Admin Profiles

Administrator profiles are used to control administrator access privileges to system features. Profiles are assigned to administrator accounts when an administrator is created.

There is one predefined administrator profile, which cannot be modified or deleted:

  • Super Admin: All functionality is accessible

Only the Super Admin user can create, edit, and delete administrator profiles. New users can create, edit, and delete administrator profiles if they are assigned the Read Write privilege in System > Admin Profiles page.

Settings for Menu Access:

Read Write

User can view and make changes to the system.

None

User cannot view or make changes to the system.

Settings for CLI Commands:

Execute

User can execute the CLI command.

None

User cannot execute the CLI command.

To create a new Administrator Profile:
  1. Go to System > Admin Profiles.
  2. Click Create New.
  3. Specify the Profile Name.
  4. Add a Comment.
  5. Specify the privileges for the Menu Access. Select None or Read Write for the following features:
    • Dashboard
      • Dashboard
    • Deception
      • VM Images
      • Monitored Network
      • Wizard
      • Deception Status
      • Deception Map
      • Whitelist
    • Incident
      • Analysis
      • Campaign
      • Attack Map
    • Fabric
      • Blocking
      • Fabric Status
    • Network
      • Interfaces
      • System DNS
      • System Routing
    • System
      • Administrators
      • Admin Profiles
      • Certificates
      • LDAP Servers
      • RADUIS Servers
      • Mail Server
      • SNMP
      • Login Disclaimer
      • System Settings
      • Table Customization
      • test-network
      • fdn-pkg
    • Log
      • All Events
      • Log Servers
  6. Specify the privileges for the CLI Commands. Select None or Read Write for the following features:
    • Configuration
      • Set
      • Unset
    • System
      • Reboot
      • Shutdown
      • Reset Configuration
      • Factory Reset
      • Firmware Upgrade
      • Reset Widgets
      • IP Tables
      • Set Confirm ID for Windows VM
      • List VM License
      • Show VM Status
      • VM reset
      • Set Maintainer
      • Set Timeout for Remote Auth
      • Log Purge
    • Utilities
      • TCP Dump
      • Trace Route
    • Diagnostics
      • Disk Attributes
      • Disk Errors
      • Disk Health
      • Disk Info
      • Raid Hardware Info
  7. Click Save.