Administrators
Administrators are configured in System > Administrators. There is already a default administrator account on the unit named admin that uses the super_admin administrator profile.
Hover over the leftmost edge of the column heading to display the Configure Table icon, which you can use to select the columns to display or to reset all the columns to their default settings. You can also drag column headings to change their order.
You need to use the default admin account, an account with the super_admin admin profile, or an administrator with read-write access control to add new administrator accounts and control their permission levels. If you log in with an administrator account that does not have the super_admin admin profile, the administrators list shows only the administrators for the current virtual domain.
The Administrators page lists the default super_admin administrator account, and all administrator accounts that you have created. The following options are available:
|
Create New |
Creates a new administrator account. See Create or edit an administrator or Create or edit a REST API administrator. |
|
Edit |
Modifies settings within an administrator’s account. When you select Edit, the Edit Administrator page opens. See Create or edit an administrator or Create or edit a REST API administrator. |
|
Delete |
Remove an administrator account. You cannot delete the original admin account until you create another user with the super_admin profile, log out of the admin account, and log in with the alternate user that has the super_admin profile. To remove multiple administrator accounts, select multiple rows in the list by holding down the Ctrl or Shift keys and then select Delete. |
|
Name |
The login name for an administrator account. |
|
Trusted Hosts |
The IP address and netmask of trusted hosts from which the administrator can log in. |
|
Profile |
The admin profile for the administrator. |
|
Type |
The type of authentication for this administrator, one of the following:
|
|
Two-factor Authentication |
FortiProxy supports FortiToken and FortiToken Mobile. FortiToken Mobile is a Fortinet application that enables you to generate One Time Passwords (OTPs) on a mobile device for FortiProxy two-factor authentication. The user’s mobile device and the FortiProxy unit must be connected to the Internet to activate FortiToken mobile. Once activated, users can generate OTPs on their mobile device without having network access. FortiToken Mobile is available for iOS and Android devices from their respective Application stores. No cellular network is required for activation. |
|
Comments |
A description of the administrator account. |