Fortinet FortiAnalyzer 3.0 MR7, Administration Manual

Page: 19 / 234

Administrative Domains (ADOMs) About administrative domains (ADOMs)
FortiAnalyzer Version 3.0 MR7 Administration Guide
05-30007-0082-20080908
19
Administrative Domains (ADOMs)
Administrative Domains (ADOMs) enable the
admin
administrator to constrain
other FortiAnalyzer unit administrators’ access privileges to a subset of devices in
the device list. For FortiGate devices with virtual domains (VDOMs), ADOMs can
further restrict access to only data from a specific FortiGate VDOM.
This section includes the following topics:
• About administrative domains (ADOMs)
• Configuring ADOMs
About administrative domains (ADOMs)
Enabling ADOMs alters the structure and available functionality of the web-based
manager and CLI according to whether you are logging in as the
admin
administrator, and, if you are not logging in as the
admin
administrator, the
administrator account’s assigned access profile.
Table 1: Characteristics of the CLI and web-based manager when ADOMs are
enabled
admin
administrator account Other administrators
Access to Global
Configuration Yes No
Access to Administrative
Domain Configuration (can
create ADOMs) Yes No
Can create administrator
accounts Yes No
Can enter all ADOMs Yes No