Fortinet black logo

Control Manager

Add a device manager admin profile

Copy Link
Copy Doc ID c0e495af-7299-11e9-81a4-00505692583a:961090
Download PDF

Add a device manager admin profile

This procedure describes how to create an Admin Profile for an administrative user with permissions for Device Profiler. This user can access the Profiled Devices tab and use that window to register, delete, enable or disable hosts and enter notes about a host. The Profiled Devices window displays devices that are treated as hosts and are also displayed in the Host View.

You can have an Admin Profile that allows an administrative user to perform additional tasks by adding more permission sets. These step-by-step instructions assume that the Admin Profile will provide permissions only for Device Profiler. Details on other settings and permissions sets see Add an admin profile.

To create a Device manager Admin Profile you must first be logged into your Administrator account.

  1. Click Users > Admin Profiles.
  2. Click Add. The Add Admin Profile screen appears with the General tab highlighted.
  3. On the General tab, enter a name for the profile, such as Device Manager.
  4. Under Manage Hosts and Ports select All.
  5. Leave the defaults for the remaining fields and click on the Permissions tab.
  6. On the Permissions tab note that some permissions are dependent on each other. Refer to the Permissions list for additional information.
  7. The minimum that this Device Manager must have is the Profiled Devices permission set. Select all of the check boxes for this set including the Custom check box.
  8. When you select the Profiled Devices permission set, the Landing Page field defaults to Profiled Devices.
  9. The Profile Devices tab is enabled when Custom is selected for the Profiled Devices permission set. Click on the Profiled Devices tab.
  10. Use the field definitions below to configure the Profile Devices specific fields.
  11. Click OK to save.

Admin profile fields for device managers

Field

Definition

Register, Delete, and Disable Profiled Devices

If enabled, the user can register, delete and disable devices that have been profiled by Device Profiler.

Modify Device Rule Confirmation Settings

If enabled, the user can change rule confirmation settings on devices that have been profiled by Device Profiler. Rule confirmation settings control whether or not Device Profiler checks a previously profiled device to determine if it still meets the criteria of the rule that categorized the device.

Manage Profiled Devices Using These Rules

All Rules—includes current rules and any rules created in the future.

Specify Rules—you must choose the rules from the Available Rules field and manually move them to the Specify Rules field.

Available Rules

Shows the existing rules you can select for this profile. Select the rule and click the right arrow to move it to the Selected Rules pane.

Selected Rules

Shows the rules you selected from the Available Rules section. The user can only access the devices associated with the rules in this list.

Add Icon

Click this button to create a new Device Profiling Rule. For information on rules, see Add or modify device profiling rule.

Modify Icon

Click this button to modify the selected Device Profiling Rule. For information on rules, see Add or modify device profiling rule.

Add a device manager admin profile

This procedure describes how to create an Admin Profile for an administrative user with permissions for Device Profiler. This user can access the Profiled Devices tab and use that window to register, delete, enable or disable hosts and enter notes about a host. The Profiled Devices window displays devices that are treated as hosts and are also displayed in the Host View.

You can have an Admin Profile that allows an administrative user to perform additional tasks by adding more permission sets. These step-by-step instructions assume that the Admin Profile will provide permissions only for Device Profiler. Details on other settings and permissions sets see Add an admin profile.

To create a Device manager Admin Profile you must first be logged into your Administrator account.

  1. Click Users > Admin Profiles.
  2. Click Add. The Add Admin Profile screen appears with the General tab highlighted.
  3. On the General tab, enter a name for the profile, such as Device Manager.
  4. Under Manage Hosts and Ports select All.
  5. Leave the defaults for the remaining fields and click on the Permissions tab.
  6. On the Permissions tab note that some permissions are dependent on each other. Refer to the Permissions list for additional information.
  7. The minimum that this Device Manager must have is the Profiled Devices permission set. Select all of the check boxes for this set including the Custom check box.
  8. When you select the Profiled Devices permission set, the Landing Page field defaults to Profiled Devices.
  9. The Profile Devices tab is enabled when Custom is selected for the Profiled Devices permission set. Click on the Profiled Devices tab.
  10. Use the field definitions below to configure the Profile Devices specific fields.
  11. Click OK to save.

Admin profile fields for device managers

Field

Definition

Register, Delete, and Disable Profiled Devices

If enabled, the user can register, delete and disable devices that have been profiled by Device Profiler.

Modify Device Rule Confirmation Settings

If enabled, the user can change rule confirmation settings on devices that have been profiled by Device Profiler. Rule confirmation settings control whether or not Device Profiler checks a previously profiled device to determine if it still meets the criteria of the rule that categorized the device.

Manage Profiled Devices Using These Rules

All Rules—includes current rules and any rules created in the future.

Specify Rules—you must choose the rules from the Available Rules field and manually move them to the Specify Rules field.

Available Rules

Shows the existing rules you can select for this profile. Select the rule and click the right arrow to move it to the Selected Rules pane.

Selected Rules

Shows the rules you selected from the Available Rules section. The user can only access the devices associated with the rules in this list.

Add Icon

Click this button to create a new Device Profiling Rule. For information on rules, see Add or modify device profiling rule.

Modify Icon

Click this button to modify the selected Device Profiling Rule. For information on rules, see Add or modify device profiling rule.