I have tried it but the requirement is we have to create a user where he/she should be able to run only few commandse.g :->> config system console >> set output standard >> execute date a part from this the user should have only read-only access for ...

Ensure “Enable FIDO2 authentication” is ONAuthentication >SAML IdP > Service Providers

If you want to allow the url then goto : security profile>web filter (edit the web filter you have created and applied to the policy)you will get a option of static url filterenable url filter and add the url

try pasting the url here https://www.fortiguard.com/webfilteryou will get an option if category is currently blocked you can view the details of it.

Can we export the configuration from the 60E and import it directly into the 60F?Configuration files are not always fully compatible when transferred directly between different FortiGate models.