Variable	Description	Default
domain-admin-log-status {enable \| disable}	Enable or disable domain-level administrator log access.	enable
domain-group-status {enable \| disable}	Enable or disable domain group support.	enable
domain-mail-stats-status {enable \| disable}	Enable or disable domain-level mail statistics.	disable
ha-central-monitor-status {enable \| disable}	Enable or disable HA central monitoring.	disable
intra-domain-protection-status {enable \| disable}	Enable or disable applying both inbound and outbound policies when an email is sent between protected domains. When this setting is disabled, if an email is sent between two protected domains, then FortiMail only applies the matching inbound policy. This means that, for example, an inbound policy with antispam would apply, but not an outbound policy with DLP. This behavior may be correct if all protected domains belong to the same company. However for an MSSP with multiple tenants, both policies should apply. In that case, enabled this setting so that FortiMail applies both inbound and outbound policies.	disable
mailbox-accounting-status {enable \| disable}	Enable or disable the mailbox accounting service.	disable
user-management {enable \| disable}	Enable or disable user management.	disable

system advanced-management

Use this command to control advanced management features that are designed for deployments such as managed security service providers (MSSP).

Advanced management options require a valid advanced management license, purchased from Fortinet.

Some subcommands are only available as part of the MTA advanced control feature. See mta-adv-ctrl-status {enable | disable}

config system advanced-management

end

Variable	Description	Default
domain-admin-log-status {enable \| disable}	Enable or disable domain-level administrator log access.	enable
domain-group-status {enable \| disable}	Enable or disable domain group support.	enable
domain-mail-stats-status {enable \| disable}	Enable or disable domain-level mail statistics.	disable
ha-central-monitor-status {enable \| disable}	Enable or disable HA central monitoring.	disable
intra-domain-protection-status {enable \| disable}	Enable or disable applying both inbound and outbound policies when an email is sent between protected domains. When this setting is disabled, if an email is sent between two protected domains, then FortiMail only applies the matching inbound policy. This means that, for example, an inbound policy with antispam would apply, but not an outbound policy with DLP. This behavior may be correct if all protected domains belong to the same company. However for an MSSP with multiple tenants, both policies should apply. In that case, enabled this setting so that FortiMail applies both inbound and outbound policies.	disable
mailbox-accounting-status {enable \| disable}	Enable or disable the mailbox accounting service.	disable
user-management {enable \| disable}	Enable or disable user management.	disable