Admin Privileges unable make change in FortiManager

This article describes a scenario where changes cannot be made upon creating a new (read-write) profile for an admin. 

This issue occurs when enabling the ADOMs.

For example:

1. It is not possible to lock the ADOM, to install a policy, or to write data.
2. The Lock button does not appear or became grey.
3. The admin profile appears as it does for read-only access even with read-write access.

1. In the GUI, go to System Settings -> Admin -> Profile -> Create New -> Set the mode to Read-Write -> OK.

2. In the GUI, go to System Settings -> Admin -> Administrators -> Create New -> admin Profile (choose the one recently created) -> OK.

3. Log in with the admin profile: no button lock will appear.

To fix the issue when the profile has been created, use the following CLI configuration:

# config system admin profile
    edit "testing"  <----- The profile created.
        set adom-lock read-write  <----- Check the rules. Change from read to read-write as appropriate.

end

Related document:

Locking an ADOM - FortiManager administration guide