Access to CLI, fnsysctl missing

[Aldowsky]

Hello;

As mentioned at multiple posts here, the fnsysctl command may provide some helpful possibilities, including access to ifconfig, ls or other very useful commands.

I tried to use it, unfortunately, not possible.

Had installed education Lab with a bit older Fortigate FortiOS version, user as initial, admin, with super_admin profile (accprofile command in that version for change).

Also, had installed (not fully yet) the Trial version of the Fortimanager with newer FortiOS, there's admin with super_user profile (and command for changing that is different, includes profileid instead of accprofile).

Command fnsysctl does not work on both (even it should work at the admin user with super_admin profile).

Two questions:

- How and where to elevate privileges for admin super_user to admin super_admin at Fortimanager FortiOS (and to get the fnsysctl command work)?

- Why the fnsysctl does not work even on the Fortigate FortiOS wher the admin has super_admin profile?

Thanks a lot!

[dbhavsar]

Good day @Aldowsky ,

If you login with super_admin, and navigate to System > Admin Profiles, select the admin profile and in the last you will see "Permit usage of CLI commands" you can enable that or select custom as per your needs. Try testing after it will allow to execute commands.

[Aldowsky]

Hello, @dbhavsar 

Thanks for reply.

I did not establish Fortimanager GUI yet. I accessed the Fortimanager Docker using command line, from Windows docker, thru ssh. As I already mentioned, it is inside education Lab.

As I can access the Fortimanager with admin/<empty>, then enter password at first login, is there a possibility  to do the same at command line and to use super_admin with a default password, again, staying at the command line?

Also, I saw at Fortigate, even the admin has super_admin profile, privileges, mentioned command fnsysctl does not work.