Fortios System Admin



Token-based authentication. Generated from GUI of Fortigate.











Enable/Disable logging for task.











Indicates whether to create or remove the object.











Configure admin users.









accprofile string



Access profile for this administrator. Access profiles control administrator access to FortiGate features. Source system.accprofile.name.







accprofile_override string



Enable to use the name of an access profile provided by the remote authentication server to control the FortiGate features that this administrator can access.







allow_remove_admin_session string



Enable/disable allow admin session to be removed by privileged admin users.







comments string



Comment.







email_to string



This administrator"s email address.







force_password_change string



Enable/disable force password change on next login.







fortitoken string



This administrator"s FortiToken serial number.







guest_auth string



Enable/disable guest authentication.







guest_lang string



Guest management portal language. Source system.custom-language.name.







guest_usergroups list / elements=string



Select guest user groups.









name string / required



Select guest user groups.





gui_dashboard list / elements=string



GUI dashboards.









columns integer



Number of columns.







id integer / required



Dashboard ID.







layout_type string



Layout type.







name string



Dashboard name.







permanent string



Permanent dashboard (can"t be removed via the GUI).







scope string



Dashboard scope.







vdom string



Virtual domain. Source system.vdom.name.







widget list / elements=string



Dashboard widgets.









fabric_device string



Fabric device to monitor.







fabric_device_widget_name string



Fabric device widget name.







fabric_device_widget_visualization_type string



Visualization type for fabric device widget.







fortiview_device string



FortiView device.







fortiview_filters list / elements=string



FortiView filters.









id integer / required



FortiView Filter ID.







key string



Filter key.







value string



Filter value.





fortiview_sort_by string



FortiView sort by.







fortiview_timeframe string



FortiView timeframe.







fortiview_type string



FortiView type.







fortiview_visualization string



FortiView visualization.







height integer



Height.







id integer / required



Widget ID.







industry string



Security Audit Rating industry.







interface string



Interface to monitor. Source system.interface.name.







region string



Security Audit Rating region.







title string



Widget title.







type string



Widget type.







width integer



Width.







x_pos integer



X position.







y_pos integer



Y position.



gui_global_menu_favorites list / elements=string



Favorite GUI menu IDs for the global VDOM.









id string / required



Select menu ID.





gui_new_feature_acknowledge list / elements=string



Acknowledgement of new features.









id string / required



Select menu ID.





gui_vdom_menu_favorites list / elements=string



Favorite GUI menu IDs for VDOMs.









id string / required



Select menu ID.





hidden integer



Admin user hidden attribute.







history0 string



history0







history1 string



history1







ip6_trusthost1 string



Any IPv6 address from which the administrator can connect to the FortiGate unit. Default allows access from any IPv6 address.







ip6_trusthost10 string



Any IPv6 address from which the administrator can connect to the FortiGate unit. Default allows access from any IPv6 address.







ip6_trusthost2 string



Any IPv6 address from which the administrator can connect to the FortiGate unit. Default allows access from any IPv6 address.







ip6_trusthost3 string



Any IPv6 address from which the administrator can connect to the FortiGate unit. Default allows access from any IPv6 address.







ip6_trusthost4 string



Any IPv6 address from which the administrator can connect to the FortiGate unit. Default allows access from any IPv6 address.







ip6_trusthost5 string



Any IPv6 address from which the administrator can connect to the FortiGate unit. Default allows access from any IPv6 address.







ip6_trusthost6 string



Any IPv6 address from which the administrator can connect to the FortiGate unit. Default allows access from any IPv6 address.







ip6_trusthost7 string



Any IPv6 address from which the administrator can connect to the FortiGate unit. Default allows access from any IPv6 address.







ip6_trusthost8 string



Any IPv6 address from which the administrator can connect to the FortiGate unit. Default allows access from any IPv6 address.







ip6_trusthost9 string



Any IPv6 address from which the administrator can connect to the FortiGate unit. Default allows access from any IPv6 address.







login_time list / elements=string



Record user login time.









last_failed_login string



Last failed login time.







last_login string



Last successful login time.







usr_name string



User name.





name string / required



User name.







password string



Admin user password.







password_expire string



Password expire time.







peer_auth string



Set to enable peer certificate authentication (for HTTPS admin access).







peer_group string



Name of peer group defined under config user group which has PKI members. Used for peer certificate authentication (for HTTPS admin access).







radius_vdom_override string



Enable to use the names of VDOMs provided by the remote authentication server to control the VDOMs that this administrator can access.







remote_auth string



Enable/disable authentication using a remote RADIUS, LDAP, or TACACS+ server.







remote_group string



User group name used for remote auth.







schedule string



Firewall schedule used to restrict when the administrator can log in. No schedule means no restrictions.







sms_custom_server string



Custom SMS server to send SMS messages to. Source system.sms-server.name.







sms_phone string



Phone number on which the administrator receives SMS messages.







sms_server string



Send SMS messages using the FortiGuard SMS server or a custom server.







ssh_certificate string



Select the certificate to be used by the FortiGate for authentication with an SSH client. Source certificate.local.name.







ssh_public_key1 string



Public key of an SSH client. The client is authenticated without being asked for credentials. Create the public-private key pair in the SSH client application.







ssh_public_key2 string



Public key of an SSH client. The client is authenticated without being asked for credentials. Create the public-private key pair in the SSH client application.







ssh_public_key3 string



Public key of an SSH client. The client is authenticated without being asked for credentials. Create the public-private key pair in the SSH client application.







trusthost1 string



Any IPv4 address or subnet address and netmask from which the administrator can connect to the FortiGate unit. Default allows access from any IPv4 address.







trusthost10 string



Any IPv4 address or subnet address and netmask from which the administrator can connect to the FortiGate unit. Default allows access from any IPv4 address.







trusthost2 string



Any IPv4 address or subnet address and netmask from which the administrator can connect to the FortiGate unit. Default allows access from any IPv4 address.







trusthost3 string



Any IPv4 address or subnet address and netmask from which the administrator can connect to the FortiGate unit. Default allows access from any IPv4 address.







trusthost4 string



Any IPv4 address or subnet address and netmask from which the administrator can connect to the FortiGate unit. Default allows access from any IPv4 address.







trusthost5 string



Any IPv4 address or subnet address and netmask from which the administrator can connect to the FortiGate unit. Default allows access from any IPv4 address.







trusthost6 string



Any IPv4 address or subnet address and netmask from which the administrator can connect to the FortiGate unit. Default allows access from any IPv4 address.







trusthost7 string



Any IPv4 address or subnet address and netmask from which the administrator can connect to the FortiGate unit. Default allows access from any IPv4 address.







trusthost8 string



Any IPv4 address or subnet address and netmask from which the administrator can connect to the FortiGate unit. Default allows access from any IPv4 address.







trusthost9 string



Any IPv4 address or subnet address and netmask from which the administrator can connect to the FortiGate unit. Default allows access from any IPv4 address.







two_factor string



Enable/disable two-factor authentication.







two_factor_authentication string



Authentication method by FortiToken Cloud.







two_factor_notification string



Notification method for user activation by FortiToken Cloud.







vdom list / elements=string



Virtual domain(s) that the administrator can access.









name string / required



Virtual domain name. Source system.vdom.name.





wildcard string



Enable/disable wildcard RADIUS authentication.







Default: "root"

Virtual domain, among those defined previously. A vdom is a virtual instance of the FortiGate that can be configured and used as a different unit.