For When You Can't Have The Real Thing
[ start | index | login ]
start > FortiOS > 6.0 > Read-Only Admin Profile

Read-Only Admin Profile

Created by dave. Last edited by dave, 223 days ago. Viewed 137 times. #1
[edit] [rdf]
labels
attachments
(2022-02-15)

Problem

I want a (or a bunch of) read-only admin(s) with global scope.

Solution

# config global
# config system accprofile
    edit "admin_readonly"
        set admingrp read
        set authgrp read
        set endpoint-control-grp read
        set fwgrp read
        set loggrp read
        set mntgrp read
        set netgrp read
        set routegrp read
        set sysgrp read
        set updategrp read
        set utmgrp read
        set vpngrp read
        set wanoptgrp read
        set wifi read
        set scope global
    next
end

Notes:

  • these instructions are for 6.2 or higher, some of these "set" commands don't work in 6.0.
  • for scope restrictions, set scope is your friend.
(>>Source)
no comments | post comment
This is a collection of techical information, much of it learned the hard way. Consider it a lab book or a /info directory. I doubt much of it will be of use to anyone else.

Useful:


snipsnap.org | Copyright 2000-2002 Matthias L. Jugel and Stephan J. Schmidt