Technical Tip: Enable config options in custom admin access profile

[salmas]

Description	This article shows how to enable config, show, get, execute, or diagnose commands when a custom admin profile is configured.
Scope	FortiGate v7.4.3+.
Solution	This setting can only be changed via a reserved super_admin profile. Login with super_admin profile administrator. Locate the custom admin profile that has given every read/write access but still cannot do any config commands. config sys accprofile     edit <profile_name>         set cli-get enable         set cli-show enable         set cli-exec enable         set cli-config enable         set cli-diagnose enable     end After this change, it will be possible to perform the above command with the custom admin profile. Related document: Administrator profiles