Description
This article describes when administrator accounts cannot be seen by default super-admin profile upon logging in to an administrator account with another super-admin profile.
Scope
FortiGate.
Solution
The built-in 'super_admin' profile is not visible for an administrator with a different Admin Profile.
No administrators with the super_admin profile are visible to an administrator with a different Admin Profile.
Only administrators with the built-in super_admin profile can perform the following tasks:
- View, edit, create, and delete super_admin administrator accounts.
- View the super_admin Admin profile.
- Restore configuration.
If a backup taken by an administrator who is not a super_admin is later restored to the firewall, this will remove all super_admin accounts.
To resolve this issue:
If no administrator with the default super_admin profile is known or available, it is necessary to factory reset and reconfigure the device. The default administrator 'admin' has the super_admin profile assigned by default.
To create additional administrator accounts with a super_admin profile on FortiGate, follow these steps:
- Log in using an existing super_admin.
- Go to System -> Administrators -> Select Create New and configure a new administrator.
- In the Admin Profile section, select super_admin.
- Configure the other settings as needed and select 'OK'.
Related articles:
Troubleshooting Tip: Admin user lost FortiToken / Token is not working
