Technical Tip: Allowing non-admin user to view logs under NDR Center

Description

This article describes a typical situation with a custom user profile created under FortiNDR Center for a specific set of users with specific privileges. Users under this profile should be able to read logs and reports 

Scope

FortiNDR on premise with NDR sensors

Solution

There are situations when a custom user profile created within FortiNDR Center allows users who are members of it need access to log and reports only and nothing else. Example below shows a screenshot for Analysts profile created under FortiNDR Center -> System -> Admin Profiles

There's a local user Analyst1 created in the Center to be a member of this profile

With this setup this user will not be able to see events generated under NDR logs by NDR sensors. To fix it either all or specific sensors need to be assigned to the above custom profile, add it under the profile by clicking Selection under Sensors and select the desired sensor