Technical Tip: How to hide secret user's `password from other admins on FortiPAM

Description

This article describes the steps to make a user's password invisible in the secret secrets for other users who logged in to FortiPAM, especially for admin users.

Scope

FortiPAM.

Solution

By default, the 'View Encrypted Information' setting is enabled in the default role profiles on FortiPAM. Therefore, all users whom that default roles assigned can view any secret's password with 'view' permission in the secrets settings.

The following 'Cannot edit default administrative profile' warning pops up while trying to edit the role as well.

In order to hide the password in the secret settings from the users who have 'view' permission, a new custom role should be created and assigned to users with 'View Encrypted Information' disabled.

Note: The password will be hidden only to those users who have 'view' permission in the secret settings.

The password will be hidden, and the 'User accprofile doesn't allow access to clear sensitive information' warning message will appear when a user attempts to view the password.