Read only admin account and certificates

[fortiFWuser]

Hello,

I have a 101F with 7.0.2 and I created an account with super_admin_readonly 

Should he be able to see the "Certificates" under system?

Thanks and regards, 

Konstantinos

[sharmaj]

Hi Konstantinos

Yes, he should be able to see the certificates under the system, but can not delete them.

[fortiFWuser]

Hmm 
Ok, but the menu is not showed. 

Also I created a test account with the same profile and it was not showed also. 

[sharmaj]

Hi

Just to confirm, are you using a customized super admin read-only profile?

Also, I hope for the general super admin users, the certificates are visible, if not, you need to enable feature visibility

[fortiFWuser]

Hi Jay, 

I use the custom profile super_admin_readonly

The other admin profiles(super admin) see the certs

[sharmaj]

Hi

Try to use default super_admin_readonly and see if it behaves the same.

[fortiFWuser]

Sorry I mistyped

I use the default. But I made a custom one and it is the same. 

[sharmaj]

What is the firmware version used?

[fortiFWuser]

It is 7.0.2 build 0234

[sharmaj]

What are the options user can see?

if not certificates under the system