After 1.2 release, there is a web proxy feature. The feature ensures that the web account password is automatically filled in/replaced on the FortiPAM server side without the leaking risk on the client machine. With enabling the feature, the write permission is no longer needed for user to launch a web browsing session.