Technical Tip: Permissions required for a FortiManager ADOM admin to have CLI access

[nradia_FTNT]

Description	This article describes the permissions required for a FortiManager ADOM Admin to have CLI access.
Scope	FortiManager 5.x, 6.x, 7.x.
Solution	In order to have CLI access, admins require the following: An Administrator account on FortiManager with access to the root ADOM. An admin profile that includes Read or Read/Write access to 'System Settings'. Note: Currently, granting Admin users CLI access will allow those Admin users visibility into all ADOMs through the CLI, even if they do not have permissions for those ADOMs. There is currently no way to allow Admin users CLI access to view information for only certain ADOMs, or to grant Admin users access to troubleshooting commands without giving viewing access to information about all ADOMs. This would require a New Feature Request. If the Admin user does not have access to the root ADOM, the error message 'Non-root ADOM user cannot access CLI' will be returned. If the Admin user has an Admin profile which does not have 'System Settings' permissions, the user will be unable to see the CLI button in the GUI at all.