Per-ADOM admin profile 7.4.2

A per-ADOM admin profile allows the administrator to log in on different ADOMs with different admin profiles.

This information is also available in the FortiAnalyzer 7.4 Administration Guide: Creating administrators

To assign a per-ADOM admin profile:

1. Create multiple ADOMs, as needed. In this example, adom1 and adom2 have been created.

   

   

2. Create multiple Admin Profiles with different access, as needed. In this example, profile1_write and profile2_read have been created.

   

   

3. Go to System Settings > Administrators, and click Create New.

   Alternatively, you can select an existing administrator and click Edit.

4. For Administrative Domain, select Specify and select the ADOMs the user should have access to.
5. For Admin Profile, select Per-ADOM.

   If Single is selected, the administrator will only have one admin profile for all ADOMs.

   When Per-ADOM is selected, the Admin Profile setting displays the list of ADOMs that you specified access to for the administrator. A Profile dropdown is available for each ADOM.

6. Using the Profile dropdowns, select an admin profile for each ADOM.

   The profile determines the administrator's access to the FortiAnalyzer features when they are in that ADOM.

   In the example below, a different profile is selected for each ADOM. The user admin1 will have profile1_write access in adom1 and profile2_read access in adom2.

   

   In System Settings > Administrators, the Profile column lists the profiles selected per-ADOM.

7. Configure the other settings for the administrator, and click OK.

In this example, admin1 has write access in adom1 and read access in adom2. See below.