How to get a 100% full backup via SSH with a Read-Only user? (Missing super_admin config)

I'm trying to automate FortiGate configuration backups by pulling them via SSH using a script. For security reasons, I want to use an account that has strictly read-only privileges (no write access).

I created a custom Admin Profile with "Read" access to all modules and assigned it to my backup user. However, when the script runs show full-configuration, the output is incomplete. I noticed that FortiOS hides higher-privileged users (like super_admin accounts) from read-only users, presumably to prevent privilege escalation.

Because of this limitation, the backup I pull via SSH is not a 100% complete configuration.

I am already aware of alternative methods, such as using Automation Stitches to push the backup to an FTP/SFTP server, or using the REST API with a token. However, my current infrastructure heavily relies on a centralized server pulling configs via SSH.

My question is: Is there any CLI trick, hidden setting, or specific configuration in FortiOS that allows a strictly read-only user to export the entire configuration (including super_admin details) via SSH without giving them write privileges?

Thanks in advance for your help!

FortiGate