Technical Tip: How to create a REST API Admin user...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 247199

Description

This article describes how to deploy a REST API Admin user and change the super_admin_readonly profile by default in order to perform a full backup.

Scope

FortiGate v7.2.4.

Solution

Go to System ->Administrators -> Create New -> REST API Admin.

Create the user, in this example 'test_api'.

Do not forget to copy the API Key when backing up the config file.

Now change the profile by CLI:

config system api-user

edit test_api

set accprofile "super_admin_readonly" <----- Change the profile previously assigned by GUI.

(test_api) # set accprofile super_admin <----- This change can be only performed by CLI.

end

Note:

Do not forget if the configuration file is backed up with a super_admin_readonly, all configurations will not be visible.

9127

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to create a REST API Admin user and assign it to an admin profile