Technical Tip: FortiManager configuration interface changes in Advanced ADOM mode

[Nour]

Description	This article describes how the VDOM interface device configuration install works in Advanced ADOM mode (i.e. Each VDOM of the FortiGate resides on a separate ADOM on the FortiManager).
Scope	FortiManager: Configured in Advanced ADOM mode, with several ADOMs, where ADOM configuration is similar to the below: Non-MGMT-ADOMs: ADOM_1, ADOM_2, ADOM_3,...: containing VDOM_1, VDOM_2, VDOM_3, .. MGMT_ADOM: Contains root (Or management VDOM) of the FortiGate.  FortiGate configured with several VDOMs.
Solution	Behavior:  Users can change under Network -> Interfaces,  interface settings of each VDOM using 2 methods: From the corresponding Non-MGMT-ADOMs. From MGMT_ADOM where all the interfaces are listed. The above changes impact the device config status of the device in all ADOMs belonging to this device. However, the Device config installation can only be done from the ADOM where the VDOM with the changes resides. Similarly, the installation preview can only be seen from the ADOM where the VDOM with the changes resides. Example: Assuming that port1 belongs to VDOM_1 that resides in ADOM_1, it is possible to change something within the configuration of port1 from either MGMT_ADOM or ADOM_1. The below would be the Config Status of VDOM_2 that resides in ADOM_2, showing a 'Modified' status of our device, but a 'Synced' status of the VDOM. The status would be the same from MGMT_ADOM or any other Non-MGMT-ADOMs except ADOM_1. Attempts to install the device config from MGMT_ADOM or any other VDOM except VDOM_1 would not be possible. Checking the installation preview from MGMT_ADOM or any other VDOM except VDOM_1 would show no changes Below would be the Config Status of VDOM_1 that resides in ADOM_1, where the changes were made, showing a 'Modified' status of the device, and a 'Modified' status of the VDOM. Device configuration would then be possible, moreover, the installation preview would show us the changes done in port1. Related article: Technical Tip: SAML SSO - FortiManager/FortiAnalyzer Troubleshooting Options