Skip to main content
funkylicious
SuperUser
SuperUser
December 2, 2022
Solved

FortiGate RBAC - users

Hello,

 

I would like to restrict access to certain users which are assigned a custom profile, access to the configuration of all Traffic Shaper / Traffic Shaping Policy / Profile options/config and was wondering if it can be achieved somehow.

The restrictions would need to be for both CLI / GUI and what I've tried is :

- put System > Configuration to Read on the profile, but that would only disable Feature Visibility from the GUI for them, but they would still work from CLI

- put Firewall > Others to Read, this would achieve want I want but would disable access to IP Pools / Protocol options.


Any help would be appreciated.

 

L.E. Running FortiOS 6.4.10

Anthony_E
Anthony_EAnswer
Staff
December 9, 2022

Hello,

 

I have asked one of our FortiGate experts and for him, it would not be possible.

He would need to lab it to be sure.

 

I hope this answer will help.

 

Regards,

 

 

Best Regards

4 replies

Anthony_E
Staff
Staff
December 5, 2022

Hello,

 

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Regards,

Best Regards
Anthony_E
Staff
Anthony_EAnswer
Staff
December 9, 2022

Hello,

 

I have asked one of our FortiGate experts and for him, it would not be possible.

He would need to lab it to be sure.

 

I hope this answer will help.

 

Regards,

 

 

Best Regards
funkylicious
SuperUser
SuperUser
December 9, 2022

Hi,
Just as I imagined.

It would be nice if future releases would provide more granular access / to what features/commands a user can use and what can be configured under the profiles assign to it.


Paul

"jack of all trades, master of none"
Anthony_E
Staff
Staff
December 9, 2022

Hello Paul,

 

I will suggest it.

 

Regards,

Best Regards
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT