Technical Tip: How to allow TACACS+ user upgrade the Firmware of FortiAnalyzer

Description

The article describes the issue when the TACACS+ user is not able to upgrade the firmware version. When a TACACS+ user upgrades the firmware version, the error pop-up 'You have no permission to access this URL' appears.

Scope

FortiAnalyzer and TACACS+.

Solution

For FortiAnalyzer to allow TACACS+ users to upgrade firmware, the admin with the Super_User profile needs to enable the following config :

config system admin user
edit <TACACS+>
set ext-auth-accprofile-override enable
set ext-auth-adom-override enable
end