Fortinet black logo

Administration Guide

Administrators

Copy Link
Copy Doc ID 5e5f427d-b811-11eb-92d0-00505692583a:151833
Download PDF

Administrators

Use the System > Administrators page to configure administrator user accounts.

If the user whose Admin Profile does not have Read Write privilege under System > Admin Profiles, the user can only view and edit their own information.

The following options are available:

Create New

Create a new administrator account.

Edit

Edit the selected entry.

Delete

Delete the selected entry.

Test Login

Test the selected user's login settings. If an error occurs, a debug message appears.

The following information is displayed:

Name

The administrator account name.

Type

The administrator type:

  • Local
  • LDAP
  • RADIUS

Profile

The Admin Profile the user belongs to.

To create a new user:
  1. Log in using an account with Read/Write access and go to System > Administrators.
  2. Click Create New.
  3. Configure the following:

    Administrator

    Name of the administrator account. The name must be 1 to 30 characters using upper-case letters, lower-case letters, numbers, or the underscore character (_).

    Password, Confirm Password

    Password of the account. The password must be 6 to 64 characters using upper-case letters, lower-case letters, numbers, or special characters.

    This field is available when Type is set to Local.

    Type

    Select Local, LDAP, or RADIUS.

    LDAP Server

    When Type is LDAP, select an LDAP Server. For more information, see LDAP Servers.

    RADIUS Server

    When Type is RADIUS, select a RADIUS Server. For more information, see RADIUS Servers.

    Admin Profile

    Select the Admin Profile.

    Trusted Host 1, Trusted Host 2, Trusted Host 3

    Enter up to three IPv4 trusted hosts. Only users from trusted hosts can access FortiDeceptor.

    Trusted IPv6 Host 1, Trusted IPv6 Host 2, Trusted IPv6 Host 3

    Enter up to three IPv6 trusted hosts. Only users from trusted hosts can access FortiDeceptor.

    Comments

    Enter an optional comment.

    Setting trusted hosts for administrators limits what computers an administrator can use to log into FortiDeceptor. When you identify a trusted host, FortiDeceptor only accepts the administrator’s login from the configured IP address or subnet. Attempts to log in with the same credentials from another IP address or subnet are dropped.

  4. Click OK.
To edit a user account:
  1. Log in using an account with Read/Write access and go to System > Administrators.
  2. Select and account and click Edit.

    Only the admin user can edit its own settings.

    You must enter the old password before you can set a new password.

  3. Edit the account and click OK.
To delete one or more user accounts:
  1. Log in using an account with Read/Write access and go to System > Administrators.
  2. Select the user account you want to delete.
  3. Click Delete and confirm that you want to delete the user.
To test LDAP or RADIUS logins:
  1. Log in using an account with Read/Write access and go to System > Administrators.
  2. Select an LDAP or RADIUS user to test.
  3. Click Test Login.
  4. Enter the user password.
  5. Click OK.

    If an error occurs, a debug message appears.

When a remote RADIUS server is configured for two-factor authentication, RADIUS users must enter a FortiToken code or the code from email/SMS to complete login or to test login.

Administrators

Use the System > Administrators page to configure administrator user accounts.

If the user whose Admin Profile does not have Read Write privilege under System > Admin Profiles, the user can only view and edit their own information.

The following options are available:

Create New

Create a new administrator account.

Edit

Edit the selected entry.

Delete

Delete the selected entry.

Test Login

Test the selected user's login settings. If an error occurs, a debug message appears.

The following information is displayed:

Name

The administrator account name.

Type

The administrator type:

  • Local
  • LDAP
  • RADIUS

Profile

The Admin Profile the user belongs to.

To create a new user:
  1. Log in using an account with Read/Write access and go to System > Administrators.
  2. Click Create New.
  3. Configure the following:

    Administrator

    Name of the administrator account. The name must be 1 to 30 characters using upper-case letters, lower-case letters, numbers, or the underscore character (_).

    Password, Confirm Password

    Password of the account. The password must be 6 to 64 characters using upper-case letters, lower-case letters, numbers, or special characters.

    This field is available when Type is set to Local.

    Type

    Select Local, LDAP, or RADIUS.

    LDAP Server

    When Type is LDAP, select an LDAP Server. For more information, see LDAP Servers.

    RADIUS Server

    When Type is RADIUS, select a RADIUS Server. For more information, see RADIUS Servers.

    Admin Profile

    Select the Admin Profile.

    Trusted Host 1, Trusted Host 2, Trusted Host 3

    Enter up to three IPv4 trusted hosts. Only users from trusted hosts can access FortiDeceptor.

    Trusted IPv6 Host 1, Trusted IPv6 Host 2, Trusted IPv6 Host 3

    Enter up to three IPv6 trusted hosts. Only users from trusted hosts can access FortiDeceptor.

    Comments

    Enter an optional comment.

    Setting trusted hosts for administrators limits what computers an administrator can use to log into FortiDeceptor. When you identify a trusted host, FortiDeceptor only accepts the administrator’s login from the configured IP address or subnet. Attempts to log in with the same credentials from another IP address or subnet are dropped.

  4. Click OK.
To edit a user account:
  1. Log in using an account with Read/Write access and go to System > Administrators.
  2. Select and account and click Edit.

    Only the admin user can edit its own settings.

    You must enter the old password before you can set a new password.

  3. Edit the account and click OK.
To delete one or more user accounts:
  1. Log in using an account with Read/Write access and go to System > Administrators.
  2. Select the user account you want to delete.
  3. Click Delete and confirm that you want to delete the user.
To test LDAP or RADIUS logins:
  1. Log in using an account with Read/Write access and go to System > Administrators.
  2. Select an LDAP or RADIUS user to test.
  3. Click Test Login.
  4. Enter the user password.
  5. Click OK.

    If an error occurs, a debug message appears.

When a remote RADIUS server is configured for two-factor authentication, RADIUS users must enter a FortiToken code or the code from email/SMS to complete login or to test login.