Configuring Administrator Accounts and Access Profiles

Configuring access profiles

The Access Profile tab displays a list of access profiles.

Access profiles, in conjunction with the domain to which an administrator account is assigned, govern which areas of the web UI and CLI that an administrator can access, and whether or not they have the permissions necessary to change the configuration or otherwise modify items in each area.

To access this part of the web UI, your administrator account’s:

  • Domain must be System
  • access profile must have Read or Read-Write permission to the Others category For details, see About administrator account permissions and domains.

To view and configure administrator accounts

  1. Go to System > Administrator > Access Profile.

Figure 122:Access Profile tab

GUI item Description
Name Displays the name of the administrator access profile.
(Green dot in column heading.) Indicates whether or not the profile is being used in one or more administrator accounts. If so, a red dot appears in this column, and the profile cannot be deleted.

Note: The access profile named super_admin_prof is always used by the admin administrator account, and cannot be deleted. In this case, a grey dot indicates only that the profile is not being used by any other administrator account.

  1. Either click New to add an account or double-click an access profile to modify it.

A dialog appears.

Figure 123:Access Profile dialog

  1. In Profile Name, enter the name for this access profile.

In the Access Control table, for each access control option, select the permissions to be granted to administrator accounts associated with this access profile. For details, see About administrator account permissions and domains.

  • None
  • Read Only Read/Write 4. Click Create.

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.