Fortigate RBAC

3 replies
1419 views
Translate All

is it possible on Fortinet to get only access to SDWAN using RBAC?

Means Users should only access SDWAN module and not the other team will manage the Firewall policies.

Is it achievable in Fortigate?

Regards,

Sanjay S

johnathan

Staff

Not sure what you mean by "RBAC". There isn't a specific permission for SDWAN, you best bet would be to give them 'Network' permissions but this is probably wider than you want.

Translate

Never trust a computer you can't throw out a window.

funkylicious

SuperUser

Hi,
You could create admin profiles with similar permissions to what you would need, described below in the link, at least for the firewall policy part.

SD-WAN part would be in the Network menu, I would guess.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-admin-profiles-on-the-FortiGate-for/ta-p/266237

Translate

"jack of all trades, master of none"

pminarik

Staff

SD-WAN configuration is part of the "Network" (CLI: netgrp) permissions. Note that this also covers interface configuration, routing, etc.

Firewall policy configurations are controlled by the "Firewall" (fwgrp) permissions.

Translate

Sign up

Login with SSO

Login to the community

Login with SSO