Technical Tip: Error 'CMDBError: 403: Access denied’ while revoking FortiToken

The following error is seen on the GUI of FortiGate when trying to revoke FortiToken to a remote user Account under User & Authentication -> User Definition, 'right-click' on the remote user account,  revoke the Token, and select 'Ok'.

However, the error is not seen when trying to revoke the FortiToken of a local user account. The issue is resolved in v7.4.5 and v7.6.0

Workaround:

Disable two-factor using CLI commands:

config user local

    edit <username>

        set two-factor disable

    next

end