For example, when Access-Accept received from RADIUS server can affect user's group membership as in Technical Note: Authentication, Remote server group match of user group configuration with RADIUS server user (refer to Related Articles) or wildcard admin authentication/authorization or even VDOM assignment in Technical Tip: Remote Admin login with Radius selecting admin access account profile (refer to Related Articles).
This article also includes a brief screen-shot document that shows how to import Fortinet VSAs into Windows 2003 Server.
Refer to the Related Articles for Technical Note: Fortinet RADIUS attribute.
Related Articles
Technical Tip: Fortinet RADIUS attribute
Technical Tip: Remote admin login with Radius selecting admin access account profile