Skip to main content
sunil
sunil
New Member
February 13, 2018
Question

Admin user Administrator Profile showing read only access

  • February 13, 2018
  • 1 reply
  • 11801 views

Hi, 

After few days i have logged into Fortiwifi 30e Firewall device, As i need to make few changes in security profiles...But i couldn't able to find add button for adding new signature in Application control.

I was wondering what happened suddenly, then i went to system-->administrator section...i can see over there profile access was changed to read only.

i don't have any other users created on this box, can anyone help how to fix this issue and get read write access for admin user.

 

Thanks in advance.

Sunil

    1 reply

    sunil
    sunilAuthor
    New Member
    February 20, 2018

    Hi Can anyone help on this issue ?

     

     

    emnoc
    emnoc
    New Member
    February 20, 2018

    Login into the fortigate via ssh ( what ever username you have ) and execute a cli cmd

     

     

    get sys  admin list

     

    What profile do you see enabled?

     

    NOTE:  V5.2.13 has a bug that it is not showing   admin or adminprofile from the cli in multi-vdom mode

     

    Alternatively you can review the local logins ( again  here an example with cli and logs stored on disk )

     

     execute log filter  category  1

     execute log filter  device 1

     execute log  filter  field  logdesc "Admin login successful"

     

    and finally

     

    execute log display

     

    You will probably need to a find super_admin  to  change that account  accessprofile or if it's wildcards and|or  remote-authentication you need to fix the issue.

     

    What changes happen on your fortigate?

    Ken

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    February 21, 2018

    I've just tested to reassign the built-in "admin" account to a read-only admin profile.

    It's not possible.

    In fact this account can only be assigned the 'super-admin' profile.

    So, could you clarify if the account you are talking about is "admin" or some account you created later?

    Terms & ConditionsAccessibility statement