FortiManager discovery & FortiGate local credentials

Hi Community,

I am looking for deep info about the relation between FortiManager discovery process & FortiGate local credentials after the discovery process. During the discovery process (onboarding new FGT) we use the local super user „123test“ and it works fine completing the discovery process but the question is what happens if we change the password of „123test“ on managed FGT? Is this local credential is still needed?

FMG training said, the discovery credentials (123test) is used to collect info about the device (version, config, model..) AND also to push new configs BUT we are using RADIUS authentication for managed proposes on FMG and FGT, that means from my best understanding the config push runs over RADIUS authenticated users (Events Logs on FGT) and NOT via local credential „123test“ anymore.

If this is true, the local credentials used during the discovery process should NOT be necessary anymore, right? or FortiManager still needs this local credentials?I am planing to change the password for this local user „123test“ and would like to clear understand the possible impacts.

Also, is there any config option in FortiManager that I could update the password of „123test“ used in the discovery process? FortiManager versions 6.4 and 7.0.

I really appreciate any inputs and since now thanks team!