Technical Tip: How to create admin user to do only packet capture

[lkumar]

Description	This article describes creating admin users who can access the firewall to only perform the packet capture and will not have any other access.
Scope	FortiGate.
Solution	To create am admin user to perform only the packet capture, log in to the firewall with a super admin credentials. Navigate to System -> Admin Profiles. In the Admin profiles tab, select Create New. Add the Name for the Admin profile. In the Access Permissions tab, check for the Network in Access Control and under Permissions, select Custom. In the Packet Capture tab click Read/Write to provide the permission for the Packet Capture. Select OK. Once the admin profile is created, select System -> Administrators and, in the Administrator tab, select Create New. Provide the username and password. In the Administrator profile tab, select the profile name. Select OK. Once the Administrator is created, Logout from the firewall and login using the credentials with the created account (Admin1). Select Network -> Diagnostics to see that the user has permissions only to perform the packet capture.