Technical Tip: Interface Bandwidth widget visibility for read-only admin accounts

Read-Only admin accounts are unable to add an Interface Bandwidth Widget for any interfaces, and will show the following error: 'Bandwidth monitoring is disabled for this interface'.

The Super Admin user will be able to add the widget successfully.

This behavior is expected for Read-Only Admin Accounts because the Interface Bandwidth Widget derives its data from diagnostic commands, such as:

diagnose netlink interface list

diagnose hardware device nic <interface>

Read-Only Admin Accounts do not have permissions to run these diagnostic commands. As a result, the system cannot fetch the required data for the widget, rendering it unavailable to read-only users.

Solution:
Enable permission-based usage of CLI commands as shown below:

Once enabled, Read-Only Account Users will be able to view the bandwidth monitoring.

Super Admin Account Users can enable and view the Interface Bandwidth Widget by ensuring the following configuration:

Enable bandwidth monitoring on the required interface.

For Example:

config system interface

    edit "dmz"
        set monitor-bandwidth enable
    next
    edit "wan1"
        set monitor-bandwidth enable
    next
end

Once enabled from a Super Admin Account, it will be viewable using a Super Admin User Account or any account that has Read/Write permission for executing the commands in the CLI.

Note:

Use a Super Admin Account to add the Interface Bandwidth Widget in the GUI.

Related article:

Troubleshooting Tip: Unable to see other administrator accounts in FortiGate