Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • OCI Administration Guide

    Home FortiGate Public Cloud 7.2.0 OCI Administration Guide
    7.2.0
    7.6.0
    7.4.0
    7.2.0
    7.0.0
    6.4.0
    6.2.0

    Certificate-based SDN connector user privileges

    Certificate-based SDN connector user privileges

    See the FortiOS Administration Guide.

    When configuring a certificate-based OCI SDN connector in FortiOS, you must enter the OCID of an OCI user who belongs to the administrator group. The user should be added in a dedicated group. The following policy summarizes minimum sufficient privileges for this user:

    • Allow dynamic-group <group_name> to read compartments in tenancy
    • Allow dynamic-group <group_name> to read instances in tenancy
    • Allow dynamic-group <group_name> to read vnic-attachments in tenancy
    • Allow dynamic-group <group_name> to read private-ips in tenancy
    • Allow dynamic-group <group_name> to read public-ips in tenancy
    • Allow group <group_name> to manage private-ips in tenancy

    • Allow group <group_name> to manage public-ips in tenancy

    • Allow group <group_name> to manage vnics in tenancy

    Previous
    Next

    Certificate-based SDN connector user privileges

    Certificate-based SDN connector user privileges

    See the FortiOS Administration Guide.

    When configuring a certificate-based OCI SDN connector in FortiOS, you must enter the OCID of an OCI user who belongs to the administrator group. The user should be added in a dedicated group. The following policy summarizes minimum sufficient privileges for this user:

    • Allow dynamic-group <group_name> to read compartments in tenancy
    • Allow dynamic-group <group_name> to read instances in tenancy
    • Allow dynamic-group <group_name> to read vnic-attachments in tenancy
    • Allow dynamic-group <group_name> to read private-ips in tenancy
    • Allow dynamic-group <group_name> to read public-ips in tenancy
    • Allow group <group_name> to manage private-ips in tenancy

    • Allow group <group_name> to manage public-ips in tenancy

    • Allow group <group_name> to manage vnics in tenancy

    Previous
    Next