Locking an ADOM
If workspace is enabled, you must lock an ADOM prior to making changes in Policy & Objects, AP Manager, VPN Manager, FortiSwitch Manager, and Extender Manager, as well as performing any device-level changes to a device, such as upgrading firmware for a device.
|
When using the FortiManager API, the ADOM does not need to be locked in order to perform device-level changes. |
In the GUI, the padlock icon shown next to the ADOM name on the banner and in the All ADOMs list will turn green when you lock an ADOM. If it is red, it means that another administrator has locked the ADOM.
Optionally, ADOM lock override can be enabled, allowing an administrator to unlock an ADOM that has been locked by another administrator and discard all of their unsaved changes.
For more information about workspace mode, see Workspace.
To lock an ADOM:
-
Ensure that you are in the specific ADOM that you will be editing (top right corner of the GUI), then click the lock icon from the banner.
-
Or, go to System Settings > ADOMs, right-click on an ADOM, and select Lock from the right-click menu.
The ADOM will now be locked, allowing you to make changes to it and preventing other administrators from making changes unless lock override is enabled. The lock icon will turn into a green locked padlock. For other administrators
To unlock an ADOM:
-
Ensure you have saved any changes you may have made to the ADOM then select Unlock ADOM from the banner.
-
Or, go to System Settings > ADOMs, right-click on an ADOM, and select Lock from the right-click menu.
If there are unsaved changes to the ADOM, a dialog box will give you the option of saving or discarding your changes before unlocking the ADOM. The ADOM will now be unlocked, allowing any administrator to lock the ADOM and make changes.
To enable or disable ADOM lock override:
Enter the following CLI commands:
config system global
set lock-preempt {enable | disable}
end