Technical Tip: Steps to create a custom admin user with limited permissions

[Somashekara_Hanumant]

Description	This article explains how to create a custom admin user with limited permissions on FortiAuthenticator.
Scope	FortiAuthenticator
Solution	Follow the steps below to create a custom admin user with limited permissions: Login as a Super Admin user. Create an custom administrator profile. System -> Administration -> Admin Profiles -> Create new. Create an Administrator account. Go to Authentication -> User Management -> Local Users -> Create new. Under Role, select Administrator and select the previously created custom profile (as per the image below). After selecting the 'Save' option, FortiAuthenticator will ask to verify the information. The user needs to provide the 'super_admin' password. Verify the new account. Login from a different browser using the 'custom_admin' user. The user can only see the allowed menus and there is no option to create any local users, since the permissions are set to read-only.