Skip to main content
MustphaBassim
New Member
December 21, 2022
Question

Read only privellege

  • December 21, 2022
  • 4 replies
  • 2453 views

Dears

 

I had configrued to make admin login for fortigate to work with LDAP users , I am trying to divieded theses users into groups one of the is read only users and the other still admin when i did the configration the read only users access with admin profile could anyone advise about that as shown in the picture the all users come from AD is working with AdminGroup but the Priv7Group which is read only is not working InkedUntitled.jpg

4 replies

Mohamed_Gaber
Explorer III
December 21, 2022

From System>Administrators you could apply different admin profiles to each user or group.

 

Mohamed_Gaber_0-1671614334830.jpeg

 

MustphaBassim
New Member
December 21, 2022

Hello dear

i put here the read only profile but the issue we had two profiles
one is full admin
second is read only
when we login with account with full admin profile it is working but when we login with read only login working is full admin

Markus_M
Staff & Editor
Staff & Editor
December 21, 2022

Hi,

 

not sure if you've seen this, but it should give you a good bunch of info, maybe solve the problem:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-assign-administrator-profiles-to-Remote/ta-p/213349

I would check the groups that your admin profiles are to be mapped to.

Best regards,

 

Markus

Best regards, Markus
Mohamed_Gaber
Explorer III
December 21, 2022

Have you checked the group members to confirm the authorization?

Test it with the local user on FortiGate and check the result.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT