Technical Tip: Access to execute and diagnose commands with custom admin profile
Description
This article describes which profile to use for complete access to execute and diagnose commands on FortiWeb devices.
Scope
FortiWeb.
Solution
In FortiWeb Units, configure a custom admin profile at System -> Admin -> Profiles with all options selected as Read/Write (as shown below).
Note: Any custom profile (even with all options selected as read-write) does not give access to the complete set of execute and diagnose commands, meaning not all execute and diagnose commands will be available.
For example, the 'diagnose network sniffer ... ' command is not available in any profile other than prof_admin.
To access all execute and diagnose commands, use the pre-defined profile 'prof_admin'.
Related document:
Configuring access profiles