FortiGate Administration Guide - FirewallShop.com

System Administrators
Administrators
System Administrators
This section describes how to configure administrator accounts on your FortiGate
unit. Administrators access the FortiGate unit to configure its operation. In its
factory default configuration, the unit has one administrator, admin. After
connecting to the web-based manager or the CLI, you can configure additional
administrators with various levels of access to different parts of the FortiGate unit
configuration.
Note: Always end your FortiGate session by logging out, in the CLI or the web-based
manager. If you do not, the session remains open.
This section describes:
• Administrators
• Access profiles
• Central Management
• Settings
• Monitoring administrators
Administrators
There are two levels of administrator accounts:
• regular administrator - an administrator with any access profile other than
super_admin
• system administrator - includes the factory default system administrator
‘admin’, and any other administrators assigned to the super_admin profile
A regular administrator account has access to configuration options as
determined by its access profile. If virtual domains are enabled, the regular
administrator is assigned to one VDOM and cannot access global configuration
options or the configuration for any other VDOM. For information about which
options are global and which are per-VDOM, see “VDOM configuration settings”
on page 72 and “Global configuration settings” on page 73.
Any administrator assigned to the super_admin access profile, including the
default administrator account ‘admin’, has full access to the FortiGate unit
configuration. In addition, they can:
• enable VDOM configuration
• create VDOMs
• configure VDOMs
• assign regular administrators to VDOMs
• configure global options
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 161