Fortinet FortiAnalyzer 3.0 MR7, Руководство администратора

Страница: 24 / 234

FortiAnalyzer Version 3.0 MR7 Administration Guide
24 05-30007-0082-20080908
Accessing ADOMs as the
admin
administrator Administrative Domains (ADOMs)
Accessing ADOMs as the
admin
administrator
When ADOMs are enabled, additional ADOM items become available to the
admin
administrator and the structure of the web-based manager menu changes.
After logging in, other administrators implicitly access the subset of the web-based
manager that pertains only to their ADOM, while the
admin
administrator
accesses the root of the web-based manager and can use all menus. The
admin
administrator must explicitly enter the part of the web-based manager that
contains an ADOM’s settings and data to configure items specific to an ADOM.
To access an ADOM
1 Log in as
admin
.
Other administrators can access only the ADOM assigned to their account.
2 In the Administrative Domains area, select the name of the ADOM you want to
enter.
The ADOM-specific menu subset appears. While in this menu subset, any
changes you make affect this ADOM only, and do not affect devices in other
ADOMs or global FortiAnalyzer unit settings.
You can return to Administrative Domain Configuration by going to Main Menu .
Assigning administrators to an ADOM
The
admin
administrator can create other administrators and assign an ADOM to
their account, constraining them to configurations and data that apply only to
devices in their ADOM.
To assign an administrator to an ADOM
1 Log in as
admin
.
Other administrators cannot configure administrator accounts when ADOMs are
enabled.
2 Go to Global Configuration > System > Admin > Administrator .
3 Configure the administrator account as described in “Adding or editing an
administrator account” on page 49 , selecting the Admin Domain that the
administrator will be able to access.
Do not select Edit for the
admin
account. The
admin
administrator account
cannot be restricted to an ADOM.
Note: By default, when ADOMs are enabled, existing administrator accounts other than
admin
are assigned to the
root
ADOM, which contains all devices in the device list. For
more information about creating other ADOMs, see “Configuring ADOMs” on page 22 .