system-admin

Create or delete an administrator.

Syntax

system-admin [-h|-c|-d]

• Only administrators with the Super Admin profile have permission to use this command.
• This command cannot be used to create or delete the default admin user.
• This command is available only on standalone and primary nodes.
• This command is not available for public cloud platforms (AWS, AZURE, GCP, OCI, PaaS) FSA.
• All parameters must not contain spaces.

• During command-line execution, the system will prompt for Password and Confirm Password inputs, which are mandatory for setting or confirming the system administrator's password. The passwords entered will be hidden for security reasons, ensuring confidentiality and consistency.

• Unlike the GUI, this command does not have the Comments and Default On-Demand Submit settings options.
• Two-factor Authentication is limited to FortiSandbox appliances and FSA-VM0T, contingent upon the purchase of the FortiToken Cloud service.

Option	Description
-c	Create an Administrator account. Option Description -u Administrator account name. -e Email address -o Phone number -f [super-admin|read-only|device|netshare|<user defined profile>] Administrator account profile -t [local|ldap|radius|ldap_wildcard|radius_wildcard] Administrator account type -w [FTM|SMS|EMAIL] Two-factor authentication method -l [en-us|ja|fr] Language preference -ld LDAP server -lr RADIUS server -t4 Trusted IPv4 hosts, separated by ; -t6 Trusted IPv4 hosts, separated by ; -gd Device group -gn Netshare group.
-d	Delete an Administrator account -u Administrator account name.
-h	Help information

Examples

Create a local Super Admin user:

system-admin -c -utest_user -eexample_email@fortinet.com -o+10123456789 -fsuper-admin -tlocal -len-us -t4192.168.1.0/255.255.255.0;192.168.2.0/255.255.255.0; -t6fd13:6918:e38c:edd5::1/64;fd13:6919:e38c:edd5::1/64; 

Password: 

Confirm Password:

Delete an existing user:

system-admin -d -utest_user