system-admin

Create or delete an administrator.

Syntax

system-admin [-h|-c|-d]

• Only administrators with the Super Admin profile have permission to use this command.
• This command cannot be used to create or delete the default admin user.
• This command is available only on standalone and primary nodes.
• This command is not available for public cloud platforms (AWS, AZURE, GCP, OCI, PaaS) FSA.
• All parameters must not contain spaces.
• Unlike the GUI, this command does not have the Comments and Default On-Demand Submit settings options.
• Two-factor Authentication is limited to FortiSandbox appliances and FSA-VM0T, contingent upon the purchase of the FortiToken Cloud service.

Option	Description
-c	Create an Administrator account. Option Description -u Administrator account name. -p Administrator account password When the System > Password Policy is enabled, it will influence the -p parameter within this CLI command during the creation of local users. -e Email address -o Phone number -f [super-admin|read-only|device|netshare|<user defined profile>] Administrator account profile -t [local|ldap|radius|ldap_wildcard|radius_wildcard] Administrator account type -w [FTM|SMS|EMAIL] Two-factor authentication method -l [en-us|ja|fr] Language preference -ld LDAP server -lr RADIUS server -t4 Trusted IPv4 hosts, separated by ; -t6 Trusted IPv4 hosts, separated by ; -gd Device group -gn Netshare group.
-d	Delete an Administrator account Option Description -u Administrator account name.
-h	Help information

Examples

Create a local Super Admin user:

system-admin -c –utest_user -pPassword –eexample_email@fortinet.com -o+10123456789 -fsuper-admin -tlocal -len-us -t4192.168.1.0/255.255.255.0; -t6fd13:6918:e38c:edd5::1/64;

Delete an existing user:

system-admin -d –utest_user