Fortinet white logo
Fortinet white logo

CLI Reference

cloud-api account

cloud-api account

Use this command to connect to Microsoft 365 and Google Workspace to access the user mailboxes.

You must have domain administrator privileges to access Microsoft 365 or Google Workspace.

Syntax

config cloud-api account

edit <profile_name>

[set description <comment_str>

set status {enable | disable}

set type {exchange | ms365 | gmail}

set admin-email <administrator_email>

set application-id <id_str>

set application-key <key_str>

set application-secret <password_str>

set tenant <password_str>

set global-address-list <id_str>

set realtime-scan-status {enable | disable}

set service-email <service_email>

set service-endpoint {china | germany | global | us-dod | us-gov}

set service-password <password_str>

set service-url <service_url>

config user-filter

edit <user-filter_name>

set status {enable | disable}

set type {ad-group | email-group | imported-user | ldap-group | regex | wildcard}

set ad-group-attr {custom | displayname | mail}

set ad-group-attr-name <attribute-name_str>

set ad-group-attr-value <attribute-value_str>

set email-group <group_name>

set ldap-group <group_str>

set ldap-profile <profile_name>

set pattern <user-filter_pattern>

next

end

end

Variable

Description

Default

<profile_name>

Enter the name of the profile.

admin-email <administrator_email>

Enter the email address of the administrator.

This setting is only available if type {exchange | ms365 | gmail} is gmail.

application-id <id_str>

Enter the application ID.

This setting is only available if type {exchange | ms365 | gmail} is ms365.

application-key <key_str>

This setting is only available if type {exchange | ms365 | gmail} is gmail.

application-secret <password_str>

Enter the application secret or password.

This setting is only available if type {exchange | ms365 | gmail} is ms365.

description <comment_str>

Enter a description of the account.

email-group <group_name>

Enter an email group name.

This setting is only available if type {ad-group | email-group | imported-user | ldap-group | regex | wildcard} is email-group.

global-address-list <id_str>

Enter the ID of a global address list.

This setting is only available if type {exchange | ms365 | gmail} is exchange.

ldap-group <group_str>

Enter the LDAP group name.

This setting is only available if type {ad-group | email-group | imported-user | ldap-group | regex | wildcard} is ldap-group.

ldap-profile <profile_name>

Select an LDAP group profile.

This setting is only available if type {ad-group | email-group | imported-user | ldap-group | regex | wildcard} is ldap-group.

realtime-scan-status {enable | disable}

Enable or disable real-time scan.

enable

service-email <service_email>

Enter the email address used to log into the service.

This setting is only available if type {exchange | ms365 | gmail} is exchange.

service-endpoint {china | germany | global | us-dod | us-gov}

Select a regional endpoint for your geographical location and regulatory compliance requirements.

This setting is only available if type {exchange | ms365 | gmail} is ms365.

global

service-password <password_str>

Enter the password used to log into the service.

This setting is only available if type {exchange | ms365 | gmail} is exchange.

service-url <service_url>

Enter the URL used to log into the service.

This setting is only available if type {exchange | ms365 | gmail} is exchange.

status {enable | disable}

Enable or disable this account.

enable

tenant <password_str>

Enter the Microsoft 365 tenant credentials.

type {exchange | ms365 | gmail}

Select whether the account is on Microsoft 365, Microsoft Exchange, or Google Workspace.

ms365

<user-filter_name>

Enter the name of the user filter.

pattern <user-filter_pattern>

Enter the user filter pattern.

This setting is only available if type {ad-group | email-group | imported-user | ldap-group | regex | wildcard} is regex or wildcard.

ad-group-attr {custom | displayname | mail}

Select the Microsoft Azure Entra ID (formerly Active Directory) group attribute.

This setting is only available if type {ad-group | email-group | imported-user | ldap-group | regex | wildcard} is ad-group.

displayname

ad-group-attr-name <attribute-name_str>

Enter the custom Microsoft Azure Entra ID (formerly Active Directory) group attribute name.

This setting is only available when both:

ad-group-attr-value <attribute-value_str>

Enter the Microsoft Azure Entra ID (formerly Active Directory) group attribute value.

This setting is only available if type {ad-group | email-group | imported-user | ldap-group | regex | wildcard} is ad-group.

status {enable | disable}

Enable or disable this user filter.

disable

type {ad-group | email-group | imported-user | ldap-group | regex | wildcard}

Select the user filter type, either:

  • ad-group: Microsoft Azure Entra ID (formerly Active Directory) group.

  • email-group: Email group.

  • imported-user: Imported internal or external user.

  • ldap-group: LDAP group.

  • regex: Regular expression.

  • wildcard:Wildcard.

wildcard

cloud-api account

cloud-api account

Use this command to connect to Microsoft 365 and Google Workspace to access the user mailboxes.

You must have domain administrator privileges to access Microsoft 365 or Google Workspace.

Syntax

config cloud-api account

edit <profile_name>

[set description <comment_str>

set status {enable | disable}

set type {exchange | ms365 | gmail}

set admin-email <administrator_email>

set application-id <id_str>

set application-key <key_str>

set application-secret <password_str>

set tenant <password_str>

set global-address-list <id_str>

set realtime-scan-status {enable | disable}

set service-email <service_email>

set service-endpoint {china | germany | global | us-dod | us-gov}

set service-password <password_str>

set service-url <service_url>

config user-filter

edit <user-filter_name>

set status {enable | disable}

set type {ad-group | email-group | imported-user | ldap-group | regex | wildcard}

set ad-group-attr {custom | displayname | mail}

set ad-group-attr-name <attribute-name_str>

set ad-group-attr-value <attribute-value_str>

set email-group <group_name>

set ldap-group <group_str>

set ldap-profile <profile_name>

set pattern <user-filter_pattern>

next

end

end

Variable

Description

Default

<profile_name>

Enter the name of the profile.

admin-email <administrator_email>

Enter the email address of the administrator.

This setting is only available if type {exchange | ms365 | gmail} is gmail.

application-id <id_str>

Enter the application ID.

This setting is only available if type {exchange | ms365 | gmail} is ms365.

application-key <key_str>

This setting is only available if type {exchange | ms365 | gmail} is gmail.

application-secret <password_str>

Enter the application secret or password.

This setting is only available if type {exchange | ms365 | gmail} is ms365.

description <comment_str>

Enter a description of the account.

email-group <group_name>

Enter an email group name.

This setting is only available if type {ad-group | email-group | imported-user | ldap-group | regex | wildcard} is email-group.

global-address-list <id_str>

Enter the ID of a global address list.

This setting is only available if type {exchange | ms365 | gmail} is exchange.

ldap-group <group_str>

Enter the LDAP group name.

This setting is only available if type {ad-group | email-group | imported-user | ldap-group | regex | wildcard} is ldap-group.

ldap-profile <profile_name>

Select an LDAP group profile.

This setting is only available if type {ad-group | email-group | imported-user | ldap-group | regex | wildcard} is ldap-group.

realtime-scan-status {enable | disable}

Enable or disable real-time scan.

enable

service-email <service_email>

Enter the email address used to log into the service.

This setting is only available if type {exchange | ms365 | gmail} is exchange.

service-endpoint {china | germany | global | us-dod | us-gov}

Select a regional endpoint for your geographical location and regulatory compliance requirements.

This setting is only available if type {exchange | ms365 | gmail} is ms365.

global

service-password <password_str>

Enter the password used to log into the service.

This setting is only available if type {exchange | ms365 | gmail} is exchange.

service-url <service_url>

Enter the URL used to log into the service.

This setting is only available if type {exchange | ms365 | gmail} is exchange.

status {enable | disable}

Enable or disable this account.

enable

tenant <password_str>

Enter the Microsoft 365 tenant credentials.

type {exchange | ms365 | gmail}

Select whether the account is on Microsoft 365, Microsoft Exchange, or Google Workspace.

ms365

<user-filter_name>

Enter the name of the user filter.

pattern <user-filter_pattern>

Enter the user filter pattern.

This setting is only available if type {ad-group | email-group | imported-user | ldap-group | regex | wildcard} is regex or wildcard.

ad-group-attr {custom | displayname | mail}

Select the Microsoft Azure Entra ID (formerly Active Directory) group attribute.

This setting is only available if type {ad-group | email-group | imported-user | ldap-group | regex | wildcard} is ad-group.

displayname

ad-group-attr-name <attribute-name_str>

Enter the custom Microsoft Azure Entra ID (formerly Active Directory) group attribute name.

This setting is only available when both:

ad-group-attr-value <attribute-value_str>

Enter the Microsoft Azure Entra ID (formerly Active Directory) group attribute value.

This setting is only available if type {ad-group | email-group | imported-user | ldap-group | regex | wildcard} is ad-group.

status {enable | disable}

Enable or disable this user filter.

disable

type {ad-group | email-group | imported-user | ldap-group | regex | wildcard}

Select the user filter type, either:

  • ad-group: Microsoft Azure Entra ID (formerly Active Directory) group.

  • email-group: Email group.

  • imported-user: Imported internal or external user.

  • ldap-group: LDAP group.

  • regex: Regular expression.

  • wildcard:Wildcard.

wildcard