Technical Tip: Unable to Create New Address Object in Firewall Policy by Admin with Custom Admin Profile

[ssanga]

Description	This article addresses an issue where administrators with a Custom Admin profile configured with 'System:Read' permissions are unable to create a new address object from the firewall policy using the GUI.
Scope	FortiGate v7.4.4, v7.4.5, v7.4.6, v7.4.7.
Solution	Administrators with a Custom Admin profile set to System: Read permissions or System: Custom with at least one sysgrp-permission set to 'read' cannot create a new address object from the firewall policy because the '+' sign is missing under Source and Destination fields in the GUI. Missing '+' sign for the Source and Destination fields. This issue has been resolved in v7.6.3 (scheduled to be released in March; 2025). These timelines for firmware release are estimates and may be subject to change. Workaround: Configure the address object under Policy & Object -> Addresses and add it to the firewall policy.