Skip to main content
vipulagr
New Member
November 27, 2020
Question

Fortinet Admin Profiles

Hello Guys,

 

Does anyone know how to create an Admin Profile in Fortigate to selectively allow Read-only access to one VDOM while Read-write to other ?

    3 replies

    Toshi_Esumi
    SuperUser
    SuperUser
    November 27, 2020

    I don't think it's possible. I allow access to multiple VDOMs, the user needs to be "super_admin". And super_admin has all read/wright access.

    emnoc
    New Member
    November 28, 2020

    Impossible, but he could create two admin profile, and then two accounts.

     

    e.g

     

     

    admin1 in vdom1  with accessprofile read-only

    admin2 in vdom2 with accessprofile super_user 

     

    Ken Felix

     

    vipulagr
    vipulagrAuthor
    New Member
    November 30, 2020

    Thank you guys, I also feel it's not possible but would have been good to have to grant only required access to Admins part of RBAC ( Role based access control ).

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT