Fortinet white logo
Fortinet white logo

Administration Guide

Administrators

Administrators

Administrators are configured in System > Administrators. There is already a default administrator account on the unit named admin that uses the super_admin administrator profile.

Hover over the leftmost edge of the column heading to display the Configure Table icon, which you can use to select the columns to display or to reset all the columns to their default settings. You can also drag column headings to change their order.

You need to use the default admin account, an account with the super_admin admin profile, or an administrator with read-write access control to add new administrator accounts and control their permission levels. If you log in with an administrator account that does not have the super_admin admin profile, the administrators list shows only the administrators for the current virtual domain.

The Administrators page lists the default super_admin administrator account, and all administrator accounts that you have created. The following options are available:

Create New

Creates a new administrator account. See Create or edit an administrator or Create or edit a REST API administrator.

Edit

Modifies settings within an administrator’s account. When you select Edit, the Edit Administrator page opens. See Create or edit an administrator or Create or edit a REST API administrator.

Delete

Remove an administrator account.

You cannot delete the original admin account until you create another user with the super_admin profile, log out of the admin account, and log in with the alternate user that has the super_admin profile.

To remove multiple administrator accounts, select multiple rows in the list by holding down the Ctrl or Shift keys and then select Delete.

Name

The login name for an administrator account.

Trusted Hosts

The IP address and netmask of trusted hosts from which the administrator can log in.

Profile

The admin profile for the administrator.

Type

The type of authentication for this administrator, one of the following:

  • Local: Authentication of an account with a local password stored on the FortiProxy unit.

  • Remote: Authentication of a specific account on a RADIUS, Lightweight Directory Access Protocol (LDAP), or Terminal Access Controller Access-Control System (TACACS+) server.

  • Remote+Wildcard: Authentication of any account on an LDAP, RADIUS, or TACACS+ server.

  • PKI: PKI-based certificate authentication of an account.

Two-factor Authentication

Two-factor authentication (2FA) status. When enabled, the administrator must supply another factor in addition to the password during authentication. FortiProxy supports the following 2FA options:

Comments

A description of the administrator account.

Administrators

Administrators

Administrators are configured in System > Administrators. There is already a default administrator account on the unit named admin that uses the super_admin administrator profile.

Hover over the leftmost edge of the column heading to display the Configure Table icon, which you can use to select the columns to display or to reset all the columns to their default settings. You can also drag column headings to change their order.

You need to use the default admin account, an account with the super_admin admin profile, or an administrator with read-write access control to add new administrator accounts and control their permission levels. If you log in with an administrator account that does not have the super_admin admin profile, the administrators list shows only the administrators for the current virtual domain.

The Administrators page lists the default super_admin administrator account, and all administrator accounts that you have created. The following options are available:

Create New

Creates a new administrator account. See Create or edit an administrator or Create or edit a REST API administrator.

Edit

Modifies settings within an administrator’s account. When you select Edit, the Edit Administrator page opens. See Create or edit an administrator or Create or edit a REST API administrator.

Delete

Remove an administrator account.

You cannot delete the original admin account until you create another user with the super_admin profile, log out of the admin account, and log in with the alternate user that has the super_admin profile.

To remove multiple administrator accounts, select multiple rows in the list by holding down the Ctrl or Shift keys and then select Delete.

Name

The login name for an administrator account.

Trusted Hosts

The IP address and netmask of trusted hosts from which the administrator can log in.

Profile

The admin profile for the administrator.

Type

The type of authentication for this administrator, one of the following:

  • Local: Authentication of an account with a local password stored on the FortiProxy unit.

  • Remote: Authentication of a specific account on a RADIUS, Lightweight Directory Access Protocol (LDAP), or Terminal Access Controller Access-Control System (TACACS+) server.

  • Remote+Wildcard: Authentication of any account on an LDAP, RADIUS, or TACACS+ server.

  • PKI: PKI-based certificate authentication of an account.

Two-factor Authentication

Two-factor authentication (2FA) status. When enabled, the administrator must supply another factor in addition to the password during authentication. FortiProxy supports the following 2FA options:

Comments

A description of the administrator account.