Справочник Пользователя для Fortinet Version 3.0

Use this command to add access profiles that control administrator access to FortiBridge features. 
Each administrator account must include an access profile. You can create access profiles that deny 
access to or allow read only, write only, or both read and write access to FortiBridge features.

config system accprofile

edit <profile-name_str>

set <keyword> <variable>

end

config system accprofile

edit <profile-name_str>

unset <keyword>

end

config system accprofile

delete <profile-name_str>

end

get system accprofile [<profile-name_str>]

show system accprofile [<profile-name_str>]

admingrp {none | r | rw | w}

Control administrator access to FortiBridge administrator 
accounts and access profiles.
none

 deny access.

r

 read only access.

rw

 read write access.

w

 write only access.

none

loggrp {none | r | rw | w}

Control administrator access to log and alert email settings.
none

 deny access.

r

 read only access.

rw

 read write access.

w

 write only access.

none

sysgrp {none | r | rw | w}

Control administrator access to system configuration settings.
none

 deny access.

r

 read only access.

rw

 read write access.

w

 write only access.

none

sysshutdowngrp {none | r | 

rw | w}

Control administrator access to system shutdown, system, 
reboot, and firmware upgrade functions.
none

 deny access.

r

 read only access.

rw

 read write access.

w

 write only access.

none