Fortinet FortiGate-5000 User Guide

120

01-28008-0013-20050204

Fortinet Inc.

System Admin

Table 23: Access profile control of access to CLI commands

Access
control

Available commands (read-only)

Available commands (write)

System
Configuration

get system

except

accprofile, admin

and

autoupdate

get router
execute enter
execute ping
execute ping-options
execute ping6
execute traceroute

config system

except

accprofile, admin

and

autoupdate

config router
execute date
execute dhcpclear
execute enter
execute ha
execute ping
execute ping-options
execute ping6
execute restore
execute router
execute time
execute traceroute

Log & Report

get alertemail
get log
execute enter

config alertemail
config log
execute enter

Security
Policy

get antivirus
get firewall
get ips
get spamfilter
get vpn
get webfilter
execute enter
execute vpn

config antivirus
config firewall
config ips
config spamfilter
config vpn
config webfilter
execute enter
execute vpn

Auth Users

get user
execute enter

config user
exec enter

Admin Users

get system admin
get system accprofile
execute enter

config system admin
config system accprofile
execute enter

FortiProtect
Update

get system autoupdate
execute backup
execute enter

config system autoupdate
execute backup
execute enter
execute update_now

System
Shutdown

execute enter

execute enter
execute factoryreset
execute formatlogdisk
execute reboot
execute restore
execute shutdown