Skip to main content
Paul2
New Member
November 17, 2016
Question

diagnose-command for non-"super_admin"-Users

  • November 17, 2016
  • 0 replies
  • 1805 views

Hello,

 

I am currently trying out the current version of FortiOS 5.4 and noticed that, if I am not a member of the "super_admin" group, I am not able to execute any "diagnose"-commands (eg diag sniffer).

 

In the past versions (5.2) it was possible to create a group and according to the permissions set in the group you would get some specific diagnose-commands.

 

But now even if I create a group with all permissions set to "Read-Write", I am not able to execute any diag-command.

 

Is this there currently no other option as to grant a user "super_admin"-rights to access diagnose-commands?

 

Thanks in advance

Regards

Paul

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!