FortiGate RBAC - users

funkylicious · ‎12-02-2022

Hello,

I would like to restrict access to certain users which are assigned a custom profile, access to the configuration of all Traffic Shaper / Traffic Shaping Policy / Profile options/config and was wondering if it can be achieved somehow.

The restrictions would need to be for both CLI / GUI and what I've tried is :

- put System > Configuration to Read on the profile, but that would only disable Feature Visibility from the GUI for them, but they would still work from CLI

- put Firewall > Others to Read, this would achieve want I want but would disable access to IP Pools / Protocol options.

Any help would be appreciated.

L.E. Running FortiOS 6.4.10

---------------------------
geek
---------------------------

Anthony_E · ‎12-08-2022

Hello,

I have asked one of our FortiGate experts and for him, it would not be possible.

He would need to lab it to be sure.

I hope this answer will help.

Regards,

Anthony-Fortinet Community Team.

View solution in original post

Anthony_E · ‎12-04-2022

Hello,

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Regards,

Anthony-Fortinet Community Team.

Anthony_E · ‎12-08-2022

Hello,

I have asked one of our FortiGate experts and for him, it would not be possible.

He would need to lab it to be sure.

I hope this answer will help.

Regards,

Anthony-Fortinet Community Team.

funkylicious · ‎12-09-2022

Hi,
Just as I imagined.

It would be nice if future releases would provide more granular access / to what features/commands a user can use and what can be configured under the profiles assign to it.

Paul

---------------------------
geek
---------------------------

Anthony_E · ‎12-09-2022

Hello Paul,

I will suggest it.

Regards,

Anthony-Fortinet Community Team.

FortiGate RBAC - users

Nominate a Forum Post for Knowledge Article Creation