| Description | This article describes how to allow debugging for admin users with the least privileges. |
| Scope | FortiGate. |
| Solution |
In the custom profile, give read/write permissions to Maintenance under the system:
Logging in with the admin user with the least privilege will enable the use of the following command and any of its parameters:
diag deb
This will give the user the same privileges to run debugs as a super admin profile.
As shown below, a 'read' permission user is still able to run the diagnostics command: |
