Skip to main content
siangjiun98
New Member
July 13, 2023
Question

FortiSIEM CMDB segmentation based on user role

  • July 13, 2023
  • 6 replies
  • 2524 views

Hi

 

I try to create a new user role named "service station admin" and assign to a user called "srvadmin". This user role only can view network device within this network range 192.x.x.x and 172.x.x.x. In these network segment, most of it are network devices plus some network devices is belongs to this network range (10.x.x.x).So i want to hide those device in that network range.CMDB devices.pngmonitored network.pngUser role based.png

 

Could anyone help me check is there any wrong configuration on this user role and anything I need to check?

 

 

6 replies

Anthony_E
Staff
Staff
July 17, 2023

Hello,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Best Regards
siangjiun98
New Member
July 19, 2023

Hi Anthony,

 

Is there any update from your side?

Anthony_E
Staff
Staff
July 19, 2023

Hello,

 

We are still looking for an answer.

We will come back to you ASAP.

 

Regards,

Best Regards
Anthony_E
Staff
Staff
July 20, 2023

Hello,

 

Sorry for my late reply.

Could you please try to have a look into this document and tell me if it is helping?:

 

https://help.fortinet.com/fsiem/6-2-0/Online-Help/HTML5_Help/Role_Settings.htm

 

Regards,

Best Regards
siangjiun98
New Member
July 20, 2023

Hi,

 

I referred and tried the solution as the link you provided and configure which initially posted before. As result it doesn't work to me and CMDB listing still can see 10.x.x.x network segment device. the thing is from the CMDB > network segment, that network segment not shows 10.x.x.x.

 

I expect is 10.x.x.x network segment device wouldn't show in CMDB devices again.

Stephen_G
Staff & Editor
Staff & Editor
July 20, 2023

Hi siangjiun98,

 

I talked with one of our experts and there don't appear to be any obvious issues in your screenshots. We recommend you open a support ticket. We can help you collect debug logs from the appserver while the user attempts actions or to view items they shouldn't be able to.

 

Sorry we can't be of more help on the forum at the moment, but our support team will be able to help you more.

 

Kind regards,

Stephen_G - Fortinet Community Team
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!