Technical Tip: ‘admin_no_access’ access profile reserved by the system: GUI/CLI behavior explained

Description

This article describes the behavior where the administrative profile 'admin_no_access' is not visible in the GUI and cannot be edited via CLI on FortiWeb.

Scope

FortiWeb.

Solution

• GUI and CLI behavior.

  • When attempting to create an administrative profile using the name 'admin_no_access' via the GUI, an error 'A duplicate entry has already existed' is displayed because the name is reserved by the system.

  • The profile 'admin_no_access' is not visible in the GUI.

• CLI example error.

PRO # config system accprofilenPRO (accprofile) # edit admin_no_accessnThis entry is reserved by system. Cannot be edited.nCommand fail. Permission denied

• GUI example error.

• Reserved profiles.

  • Are hidden from the GUI.

  • Cannot be modified or edited via CLI.

  • Are protected to prevent conflicts with internal system operations.

  • To achieve similar functionality, a new access profile should be created using a unique, non-reserved name, e.g., AdminNo_access, AdminsProfile, etc.

Conclusion:

Avoid using the reserved name ‘admin_no_access’ when creating custom administrative profiles, as it is reserved by the FortiWeb system. Use a unique profile name to ensure proper management and prevent conflicts. Reserved profiles cannot be viewed, edited, or deleted.

Related document:

Configuring access profiles