FortiGate Administration Guide - FirewallShop.com

System Administrators
Access profiles
Table 30: Access profile control of access to CLI commands
Spamfilter Configuration (spamgrp)
System Configuration (sysgrp)
VPN Configuration (vpngrp)
Webfilter Configuration (webgrp)
spamfilter
system except accprofile, admin,
arp-table, autoupdate, fortianalyzer,
interface, and zone.
execute date
execute ha
execute ping
execute ping-options
execute ping6
execute time
execute traceroute
execute cfg
execute factoryreset
execute reboot
execute shutdown
execute deploy
execute set-next-reboot
execute ssh
execute telnet
execute disconnect-admin-session
execute usb
vpn
execute vpn
webfilter
Go to System > Admin > Access Profile to add access profiles for FortiGate
administrators. Each administrator account belongs to an access profile. You can
create access profiles that deny access to, allow read-only, or allow both readand
write-access to FortiGate features.
When an administrator has read-only access to a feature, the administrator can
access the web-based manager page for that feature but cannot make changes to
the configuration. There are no Create or Apply buttons and lists display only the
View ( ) icon instead of icons for Edit, Delete or other modification commands.
Viewing the access profiles list
Use the admin account or an account with Admin Users read and write access to
create or edit access profiles. Go to System > Admin > Access Profile.
Figure 92: Access profile list
Create New
Profile Name
Delete icon
Edit icon
Add a new access profile.
The name of the access profile.
Select to delete the access profile.
You cannot delete an access profile that has administrators assigned to it.
Select to modify the access profile.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 171