Technical Tip: ‘admin_no_access’ access profile reserved by the system: GUI/CLI behavior explained

• GUI and CLI behavior.
  • When attempting to create an administrative profile using the name 'admin_no_access' via the GUI, an error 'A duplicate entry has already existed' is displayed because the name is reserved by the system.
  • The profile 'admin_no_access' is not visible in the GUI.

• CLI example error.

PRO # config system accprofile PRO (accprofile) # edit admin_no_access This entry is reserved by system. Cannot be edited. Command fail. Permission denied

• GUI example error.

• Reserved profiles.
  • Are hidden from the GUI.
  • Cannot be modified or edited via CLI.
  • Are protected to prevent conflicts with internal system operations.
  • To achieve similar functionality, a new access profile should be created using a unique, non-reserved name, e.g., AdminNo_access, AdminsProfile, etc.

Conclusion:

Avoid using the reserved name ‘admin_no_access’ when creating custom administrative profiles, as it is reserved by the FortiWeb system. Use a unique profile name to ensure proper management and prevent conflicts. Reserved profiles cannot be viewed, edited, or deleted.

Related document:

Configuring access profiles