Technical Tip: Bare minimum admin permission to send Invitation Code email

The goal is to create an admin role that can send an Invitation Code email while restricting all other operational functions in FortiClient EMS.

• Clone the default 'Restricted Administrator' role, tick 'View User Configuration ' -> Save.

• The user who got assigned to this role will be able to see the 'Send' Invitation Code button.

• However, there will be a 'Permission Denied' pop-up message, and FortiClient EMS will log out users.

Solution:

1. Edit the admin role with below permissions:
   Manage Invitations + View User Configurations + Manage alert settings + View alert settings.
   
   
2. Assign the role to the admin user.
                                                          
                                                            
3. The admin user logs into FortiClient EMS, attempts to send the Invitation Code email.
   It is now possible to send the Invitation Code email without getting the 'Permission Denied' pop-up message.
                                                                          
                                                             
4. In cases where the pop-up message still appears, simply select 'Cancel'.
   The page will not refresh, and the Invitation Code email will still be sent.