Administrators

Administrators

Administrators are configured in System > Administrators. There is already a default administrator account on the unit named admin that uses the super_admin administrator profile.

Hover over the leftmost edge of the column heading to display the Configure Table icon, which you can use to select the columns to display or to reset all the columns to their default settings. You can also drag column headings to change their order.

You need to use the default admin account, an account with the super_admin admin profile, or an administrator with read-write access control to add new administrator accounts and control their permission levels. If you log in with an administrator account that does not have the super_admin admin profile, the administrators list shows only the administrators for the current virtual domain.

The Administrators page lists the default super_admin administrator account, and all administrator accounts that you have created. The following options are available:

Create New	Creates a new administrator account. See Create or edit an administrator or Create or edit a REST API administrator.
Edit	Modifies settings within an administrator’s account. When you select Edit, the Edit Administrator page opens. See Create or edit an administrator or Create or edit a REST API administrator.
Delete	Remove an administrator account. You cannot delete the original admin account until you create another user with the super_admin profile, log out of the admin account, and log in with the alternate user that has the super_admin profile. To remove multiple administrator accounts, select multiple rows in the list by holding down the Ctrl or Shift keys and then select Delete.
Name	The login name for an administrator account.
Trusted Hosts	The IP address and netmask of trusted hosts from which the administrator can log in.
Profile	The admin profile for the administrator.
Type	The type of authentication for this administrator, one of the following: Local: Authentication of an account with a local password stored on the FortiProxy unit. Remote: Authentication of a specific account on a RADIUS, Lightweight Directory Access Protocol (LDAP), or Terminal Access Controller Access-Control System (TACACS+) server. Remote+Wildcard: Authentication of any account on an LDAP, RADIUS, or TACACS+ server. PKI: PKI-based certificate authentication of an account.
Two-factor Authentication	FortiProxy supports FortiToken and FortiToken Mobile. FortiToken Mobile is a Fortinet application that enables you to generate One Time Passwords (OTPs) on a mobile device for FortiProxy two-factor authentication. The user’s mobile device and the FortiProxy unit must be connected to the Internet to activate FortiToken mobile. Once activated, users can generate OTPs on their mobile device without having network access. FortiToken Mobile is available for iOS and Android devices from their respective Application stores. No cellular network is required for activation.
Comments	A description of the administrator account.

Administrators

Administrators are configured in System > Administrators. There is already a default administrator account on the unit named admin that uses the super_admin administrator profile.

The Administrators page lists the default super_admin administrator account, and all administrator accounts that you have created. The following options are available:

Create New

Creates a new administrator account. See Create or edit an administrator or Create or edit a REST API administrator.

Edit

Modifies settings within an administrator’s account. When you select Edit, the Edit Administrator page opens. See Create or edit an administrator or Create or edit a REST API administrator.

Delete

Remove an administrator account.

You cannot delete the original admin account until you create another user with the super_admin profile, log out of the admin account, and log in with the alternate user that has the super_admin profile.

To remove multiple administrator accounts, select multiple rows in the list by holding down the Ctrl or Shift keys and then select Delete.

Name

The login name for an administrator account.

Trusted Hosts

The IP address and netmask of trusted hosts from which the administrator can log in.

Profile

The admin profile for the administrator.

Type

The type of authentication for this administrator, one of the following:

Local: Authentication of an account with a local password stored on the FortiProxy unit.
Remote: Authentication of a specific account on a RADIUS, Lightweight Directory Access Protocol (LDAP), or Terminal Access Controller Access-Control System (TACACS+) server.
Remote+Wildcard: Authentication of any account on an LDAP, RADIUS, or TACACS+ server.
PKI: PKI-based certificate authentication of an account.

Two-factor Authentication

FortiProxy supports FortiToken and FortiToken Mobile. FortiToken Mobile is a Fortinet application that enables you to generate One Time Passwords (OTPs) on a mobile device for FortiProxy two-factor authentication. The user’s mobile device and the FortiProxy unit must be connected to the Internet to activate FortiToken mobile. Once activated, users can generate OTPs on their mobile device without having network access. FortiToken Mobile is available for iOS and Android devices from their respective Application stores. No cellular network is required for activation.

Comments

A description of the administrator account.

Administration Guide

Administrators

Administrators