Empty ADOMs can now be deleted without un-assigning the Policy Packages assigned to the ADOM. Empty ADOMs can also be deleted without having to remove them from administrator's accounts. Once FortiGate devices are removed and the ADOM is empty, the ADOM can be deleted immediately.
Deleting an ADOM after removing FortiGate devices resulted in a message Unable to delete because the adom is in global assignment list or is referenced by a defined admin account. The ADOM may still be referenced by administrator accounts or global policy packages, and the references may be not easy to be find and remove. The following message was shown in earlier versions:
The process of deleting ADOMs has been improved in this release. The administrator must remove all FortiGate devices from the ADOM. While deleting the ADOM, the references to administrator accounts and global policy packages will be shown and you can delete the ADOM without removing the listed references. The references to administrator accounts and global policy packages will be removed when deleting the ADOM.
- Create a test-ADOM and reference it in the user test-admin.
- Use the ADOM in Global Database assignment.
- Delete the ADOM. The following message is shown.
- Click Delete Anyway to automatically remove the reference and delete the ADOM.