The FortiClient don't need any special permissions in general.
Only if you working with machine certificates, than you need special permissions on the certificate it self, otherwise normal user are not allowed to read the private key.
What is your VPN scenario?
- Have you found a solution? Then give your helper a "Like" and mark the solution.