Admin and Guest account

[Baptiste]

Hi,

I'm using an "admin-guest" that can only create guest account.

I can choose if username/password are auto-generated, that's working fine.

I'm missing a parameter : I would like to restrict expiration time (lock the parameter with the one I want)

for example admin-guest-1 can only create guest accounts with 4 hours validity after login (and this admin can't change this setting)

and admin-guest-2 can create guest account with 30 days validity after login (and this admin can't change this setting)

and so on...

Is there a way to achieve this ?

Thanks !

[xsilver_FTNT]

Hello,

as this is not currently supported then the usual way is to open NFR (new feature request).

Check with your closest Fortinet sales representative.

Kind regards,

Tomas

[Jeff_FTNT]

You may create two different Guest Group with different option. Then user in different have different  restrict, thanks.

[Baptiste]

Hello, thank you for you feedback

@jeff : there will be two different settings, but as it is not locked, guest admins can change that

I think it's a mistake because username & password settings are locked

I will go thru NFR process, I will post any info

[Baptiste]

Ok, I was doing a last test while writing my NFR, there is another thing annoying : auto-generated login & password can be change after creation. Ok for password changing, not for username !

Here is my NFR send to my Fortinet sales representative :

  -------------------------------------------------------------------------

I'm using an "admin-guest" that can only create guest account. I can choose if username/password are auto-generated,  “admin-guest” can’t change it, settings are locked.

But it’s only when creating a new user… auto-generated login & password can be change after. Ok for password changing, not for username !   In order to enforce Internet Access Policy, I ask for :

1^st] restrict expiration time (lock the parameter with the one I want on guest-group) for example Wifi-Guest-Daily is a guest-group with 8 hours validity after login and Wifi-Guest-Month is a guest-group with 30 days validity after login and so on...

2^nd] those settings come with the one above :

ability to restrict (or not) an admin-guest from changing :

Username

Password

Expiration date

-------------------------------------------------------------------------