system admin
Use this command to configure FortiMail administrator accounts.
By default, FortiMail units have a single administrator account, admin. For more granular control over administrative access, you can create additional administrator accounts that are restricted to being able to configure a specific protected domain and/or with restricted permissions. For more information, see the FortiMail Administration Guide.
Syntax
config system admin
edit <name_str>
set access-profile <profile_name>
set auth-strategy {ldap | local | local-plus-radius | pki | radius}
set is-system-domain {no | yes}
set ldap-profile <profile_name>
set radius-permission-check {enable | disable}
set radius-profile <profile_int>
set radius-subtype-id <subtype_int>]
set radius-vendor-id <vendor_int>
set sshkey <key_str>
set theme
set trusthosts <host_ipv4mask>
set webmode (basic | advanced)
end
|
Variable |
Description |
Default |
|
Enter the name of the administrator account. |
|
|
|
Enter the name of an access profile that determines which functional areas the administrator account may view or affect. |
|
|
|
auth-strategy {ldap | local | local-plus-radius | pki | radius} |
Select the local or remote type of authentication that the administrator will be able to use:
|
local |
|
Enter |
yes |
|
|
Enter this administrator account’s preference for the display language of the web-based manager. Available languages vary by whether or not you have installed additional language resource files. To view a list of languages, enter a question mark ( |
english |
|
|
If |
|
|
|
If Caution: Do not enter a FortiMail administrator password less than six characters long. For better security, enter a longer password with a complex combination of characters and numbers, and change the password regularly. Failure to provide a strong password could compromise the security of your FortiMail unit. |
|
|
|
If Whether the administrator is required to log in only with a valid personal certificate or password-style authentication fallback is allowed varies by your configuration of pki-mode {enable | disable}. |
|
|
|
If |
disable |
|
|
If |
|
|
|
If |
0 |
|
|
If |
0 |
|
|
Enter the SSH key string surrounded in single straight quotes ( When connecting from an SSH client that presents this key, the administrator will not need to provide their account name and password in order to log in to the CLI. |
|
|
|
Enable to activate the admin user. |
disable |
|
|
Enter the system admin GUI theme. |
|
|
|
Enter this administrator account’s preference for the display theme when logging in. |
|
|
|
Enter one to three IP addresses and netmasks from which the administrator can log in to the FortiMail unit. Separate each IP address and netmask pair with a comma ( To allow the administrator to authenticate from any IP address, enter |
0.0.0.0/0.0.0.0 |
|
|
Enter which display mode will initially appear when the administrator logs in to the web-based manager. The administrator may switch the display mode during their session; this affects only the initial state of the display. |
basic |