Fortianalyzer: Add new user with super-user rights and admin role

[Duy2003]

Hi team,
I created an admin account (local) with admin-profile as super-user. Although it is the highest privilege, I cannot add device/edit, even though I checked the information in the admin-profile (super-user) and selected the add Device feature.
Thanks

[Jean-Philippe_P]

Hello Duy2003, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks, 

[Jean-Philippe_P]

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP.

Thanks,

[Jean-Philippe_P]

Hi again,

Can any of you @heng @vraev @emorlang_FTNT @AEK help @Duy2003 please?

Thanks in advance!

[AEK]

Hi Duy

Can you post a screenshot of the profile and the user, and the related CLI config as well?

[heng]

Hi there, is the authenticated admin user that you used to login matched a different profile? Hence you are not able to edit/add. etc.

You can run CLI to check what profile it being matched for the same login user.

FMG01 # diagnose system admin-session list

*** entry 0 ***
session_id: 61590 (seq: 0)
username: admin
admin template: admin
from: GUI(172.16.122.1) (type 1)
profile: Super_User
adom: root
session length: 29 (seconds)
idle: 17 (seconds)

[sjoshi]

It seems that even though you assigned the Super_User profile to the admin account, the issue might be related to the specific permissions granted within that profile. Double-check the settings in the Super_User profile to ensure that the necessary permissions for adding devices and editing are enabled. If the problem persists, consider reviewing the device group access settings and policy package access for that administrator account.