Fortinet black logo

Identity & Access Management (IAM)

Managing permission profiles

24.1.0
Copy Link
Copy Doc ID cb035e9b-aa60-11ee-8673-fa163e15d75b:488605
Download PDF

Managing permission profiles

Permission profiles are listed on the Permission Profiles page. By selecting a permission profile, you can review specific details of the profile:

  • Permission Profile Info tab: Displays Basic Info and Permission Details, including linked portals and portal permissions.

  • Assigned To tab: Lists all user accounts linked to the permission profile.

You can edit, disable, and delete permission profiles from the Permission Profiles page.

Note

You cannot edit, disable, or delete the default SysAdmin permission profile. See Creating a permission profile.

Editing a permission profile

Permission profile Basic Info and portal permissions can be edited.

To edit a permission profile:
  1. Select Permission Profiles from the left-hand navigation menu. The Permission Profiles page opens.

  2. Select the permission profile you want to edit. The Permission Profiles / <profile_name> page is displayed.

  3. Click Edit.

  4. Make changes as required to Description and portal permissions.

  5. Click Update. The profile has been updated for all users assigned to it.

Disabling a permission profile

If a permission profile is not needed at the moment, but may be required in the future, it can be temporarily disabled. A permission profile cannot be disabled if an active IAM user is assigned to it.

To disable a permission profile:
  1. Select Permission Profiles from the left-hand navigation menu. The Permission Profiles page opens.

  2. Select the profile you want to disable.

  3. Click Disable. The profile and any assigned users are disabled.

Deleting a permission profile

You can permanently delete a permission profile that is no longer needed. A permission profile cannot be deleted if an active IAM user is assigned to it.

To delete a permission profile:
  1. Select Permission Profiles from the left-hand navigation menu. The Permission Profiles page opens.

  2. Select the profile you want to delete.

  3. Click Delete.

Managing permission profiles

Permission profiles are listed on the Permission Profiles page. By selecting a permission profile, you can review specific details of the profile:

  • Permission Profile Info tab: Displays Basic Info and Permission Details, including linked portals and portal permissions.

  • Assigned To tab: Lists all user accounts linked to the permission profile.

You can edit, disable, and delete permission profiles from the Permission Profiles page.

Note

You cannot edit, disable, or delete the default SysAdmin permission profile. See Creating a permission profile.

Editing a permission profile

Permission profile Basic Info and portal permissions can be edited.

To edit a permission profile:
  1. Select Permission Profiles from the left-hand navigation menu. The Permission Profiles page opens.

  2. Select the permission profile you want to edit. The Permission Profiles / <profile_name> page is displayed.

  3. Click Edit.

  4. Make changes as required to Description and portal permissions.

  5. Click Update. The profile has been updated for all users assigned to it.

Disabling a permission profile

If a permission profile is not needed at the moment, but may be required in the future, it can be temporarily disabled. A permission profile cannot be disabled if an active IAM user is assigned to it.

To disable a permission profile:
  1. Select Permission Profiles from the left-hand navigation menu. The Permission Profiles page opens.

  2. Select the profile you want to disable.

  3. Click Disable. The profile and any assigned users are disabled.

Deleting a permission profile

You can permanently delete a permission profile that is no longer needed. A permission profile cannot be deleted if an active IAM user is assigned to it.

To delete a permission profile:
  1. Select Permission Profiles from the left-hand navigation menu. The Permission Profiles page opens.

  2. Select the profile you want to delete.

  3. Click Delete.