Technical Tip: Unable to create a new address object in Firewall Policy by the admin with Custom Admin Profile

[ssanga]

Description	This article addresses an issue where administrators with a Custom Admin profile configured with 'System:Read' permissions are unable to create a new address object from the firewall policy using the GUI.
Scope	FortiGate v7.4.4, v7.4.5, v7.4.6, v7.4.7.
Solution	Administrators with a Custom Admin profile set to System: Read permissions or System: Custom with at least one sysgrp-permission set to 'read' cannot create a new address object from the firewall policy because the '+' sign is missing under Source and Destination fields in the GUI. Missing '+' sign for the Source and Destination fields. This issue has been resolved in FortiOS version 7.6.3. Workaround: Configure the address object under Policy & Object -> Addresses and add it to the firewall policy.