Skip to main content
ssanga
Staff & Editor
ssanga
Staff & Editor
March 14, 2025

Technical Tip: Unable to create a new address object in Firewall Policy by the admin with Custom Admin Profile

  • March 14, 2025
  • 0 replies
  • 776 views
Description

This article addresses an issue where administrators with a Custom Admin profile configured with 'System:Read' permissions are unable to create a new address object from the firewall policy using the GUI.
Scope

FortiGate v7.4.4 to v7.4.9.
Solution

Administrators with a Custom Admin profile set to System: Read permissions or System: Custom with at least one sysgrp-permission set to 'read' cannot create a new address object from the firewall policy because the '+' sign is missing under the Source and Destination fields in the GUI.

Admin-Profile.PNG

 

Missing '+' sign for the Source and Destination fields.


source.PNG

 

destination.PNG


This issue has been resolved in FortiOS version 7.6.3.

Workaround:
Configure the address object under Policy & Object -> Addresses and add it to the firewall policy.
    Terms & ConditionsAccessibility statement