FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
bksol92
Staff
Staff
Article Id 292061
Description This article describes that FortiManager system settings are not entirely made available for cloned super user profiles.
Scope

FortiManager.

Solution

A user assigned with a cloned super user profile will not have complete access to FortiManager's system settings.

For instance, admins with the cloned super user profile will not be able to make changes to existing admin user accounts or create new ones, while the original super user profile will allow such changes to be made:

 

super_user.PNG

 

  • Create and Edit buttons are available when logged in as super_user.

 

clone_admin.PNG

 

  • Create and Edit buttons are not available when logged in as clone_admin.

Under 'config system admin profile', a cloned super user profile will have super-user-profile disabled by default:

 

super_user_profile.PNG

 

Simply enable the super-user-profile to grant the cloned profile the same level of access as the original super-user profile:

 

config sys admin profile
    edit "Cloned_Super_User"
        set super-user-profile en
    end

 

Once that is done, the admin with the cloned super user profile should be able to make changes to other admin accounts:

 

super-user-enabled.PNG

 

  • Create and Edit buttons are now available for clone_admin after enabling super-user-profile for Clone_Super_User profile.

 

Contributors