Fortinet Gate 60D, Administration Manual

Page: 223 / 706

System Admin Admin profiles
FortiGate Version 4.0 Administration Guide
01-400-89802-20090424
223
http://docs.fortinet.com/ • Feedback
The admin profile has a similar effect on administrator access to CLI commands. The
following table shows which command types are available in each
Access Control
category. You can access “get” and “show” commands with Read Only access. Access to
“config” commands requires Read-Write access.
Table 40: Admin profile control of access to CLI commands
Access control Available CLI commands
Admin Users (admingrp)
system admin
system accprofile
Antivirus Configuration (avgrp)
antivirus
Auth Users (authgrp)
user
Firewall Configuration (fwgrp)
firewall
Use the
set fwgrp custom
and
config fwgrp-
permission
commands to set some firewall permissions
individually. You can make selections for policy, address,
service, schedule, profile, and other (VIP) configurations.
For more information, see
FortiGate CLI Reference .
FortiProtect Update (updategrp)
system autoupdate
execute update-av
execute update-ips
execute update-now
IPS Configuration (ipsgrp)
ips
Log & Report (loggrp)
alertemail
log
system fortianalyzer
execute log
Maintenance (mntgrp)
execute formatlogdisk
execute restore
execute backup
execute batch
execute usb-disk
Network Configuration (netgrp)
system arp-table
system dhcp
system interface
system zone
execute dhcp lease-clear
execute dhcp lease-list
execute clear system arp table
execute interface