FortiGate Administration Guide - FirewallShop.com

Administrators
System Administrators
The super_admin access profile cannot be changed - it does not appear in the list
of profiles in System > Access Profile, but it is one of the selections in the
Access Profile drop-down list in System > Admin New/Edit Administrator dialog
box.
Figure 86: super_admin profile in Administrator dialog box
Users assigned to the super_admin profile:
• Cannot delete logged-in users who are also assigned the super_admin profile
• Can delete other users assigned the super_admin profile and/or change the
configured authentication method, password, or access profile, only if the other
users are not logged in
• Can delete the default ‘admin’ account only if another user with the
super_admin profile is logged in and the default ‘admin’ user is not
By default, ‘admin’ has no password. The password should be 32 characters or
less.
Note: For users with super_admin access profile, you can reset the password in the CLI. If
you change the password of a user who is logged in, they will be logged out and made to
re-authenticate with the new password.
For a user ITAdmin with the access profile super_admin, to set the password to 123456:
config sys admin
edit ITAdmin
set password 123456
end
For a user ITAdmin with the access profile super_admin, to reset the password from
123456 to the default ‘empty’:
config sys admin
edit ITAdmin
unset password 123456
end
FortiGate Version 3.0 MR5 Administration Guide
162 01-30005-0203-20070830