Read only privellege

[MustphaBassim]

Dears

I had configrued to make admin login for fortigate to work with LDAP users , I am trying to divieded theses users into groups one of the is read only users and the other still admin when i did the configration the read only users access with admin profile could anyone advise about that as shown in the picture the all users come from AD is working with AdminGroup but the Priv7Group which is read only is not working

[Mohamed_Gaber]

From System>Administrators you could apply different admin profiles to each user or group.

[MustphaBassim]

Hello dear

i put here the read only profile but the issue we had two profiles
one is full admin
second is read only
when we login with account with full admin profile it is working but when we login with read only login working is full admin

[Markus_M]

Hi,

not sure if you've seen this, but it should give you a good bunch of info, maybe solve the problem:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-assign-administrator-profiles-to-Re...

I would check the groups that your admin profiles are to be mapped to.

Best regards,

Markus

[Mohamed_Gaber]

Have you checked the group members to confirm the authorization?

Test it with the local user on FortiGate and check the result.