Fortinet black logo

Administration Guide

Admin Profiles

Admin Profiles

Each administrator account belongs to an admin profile. The admin profile separates FortiProxy features into access control categories for which an administrator with read-write access can enable none (deny), read-only, or read-write access.

Read-only access for a GUI page enables the administrator to view that page. However, the administrator needs write access to change the settings on the page.

The admin profile has a similar effect on administrator access to CLI commands. You can access get and show commands with Read Only access, but access to config commands requires Read-Write access.

When an administrator has read-only access to a feature, the administrator can access the GUI page for that feature but cannot make changes to the configuration. There are no Create or Apply buttons, and lists display only the View icon instead of icons for Edit, Delete, or other modification commands.

You need to use the admin account or an account with read-write access to create or edit admin profiles.

The Admin Profile page lists all administration profiles that you created as well as the default admin profiles. On this page, you can edit, delete, or create an admin profile.

To view administrator profiles, go to System > Admin Profiles.

Hover over the leftmost edge of the column heading to display the Configure Table icon, which you can use to select the columns to display or to reset all the columns to their default settings. You can also drag column headings to change their order.

The following options are available:

Create New

Creates an administrator profile. See Create or edit an administrator profile.

Edit Profile

Modifies the selected administrator profile. When you click Edit Profile, the Edit Administrator Profile page opens. See Create or edit an administrator profile.

NOTE: You cannot edit the super_admin profile.

Delete

Removes the admin profile from the list on the page.

You cannot delete an admin profile that has administrators assigned to it.

To remove multiple admin profiles, select multiple rows in the list by holding down the Ctrl or Shift keys and then select Delete.

Profile Name

The name of the admin profile.

Comments

Comments about the admin profile.

Ref.

Displays the number of times the object is referenced to other objects.

To view the location of the referenced object, select the number in Ref.; the Object Usage window opens and displays the various locations of the referenced object.

Admin Profiles

Each administrator account belongs to an admin profile. The admin profile separates FortiProxy features into access control categories for which an administrator with read-write access can enable none (deny), read-only, or read-write access.

Read-only access for a GUI page enables the administrator to view that page. However, the administrator needs write access to change the settings on the page.

The admin profile has a similar effect on administrator access to CLI commands. You can access get and show commands with Read Only access, but access to config commands requires Read-Write access.

When an administrator has read-only access to a feature, the administrator can access the GUI page for that feature but cannot make changes to the configuration. There are no Create or Apply buttons, and lists display only the View icon instead of icons for Edit, Delete, or other modification commands.

You need to use the admin account or an account with read-write access to create or edit admin profiles.

The Admin Profile page lists all administration profiles that you created as well as the default admin profiles. On this page, you can edit, delete, or create an admin profile.

To view administrator profiles, go to System > Admin Profiles.

Hover over the leftmost edge of the column heading to display the Configure Table icon, which you can use to select the columns to display or to reset all the columns to their default settings. You can also drag column headings to change their order.

The following options are available:

Create New

Creates an administrator profile. See Create or edit an administrator profile.

Edit Profile

Modifies the selected administrator profile. When you click Edit Profile, the Edit Administrator Profile page opens. See Create or edit an administrator profile.

NOTE: You cannot edit the super_admin profile.

Delete

Removes the admin profile from the list on the page.

You cannot delete an admin profile that has administrators assigned to it.

To remove multiple admin profiles, select multiple rows in the list by holding down the Ctrl or Shift keys and then select Delete.

Profile Name

The name of the admin profile.

Comments

Comments about the admin profile.

Ref.

Displays the number of times the object is referenced to other objects.

To view the location of the referenced object, select the number in Ref.; the Object Usage window opens and displays the various locations of the referenced object.