Fortinet 3.0 MR7 manual Administrative Domains ADOMs, About administrative domains ADOMs

Administrative Domains (ADOMs) About administrative domains (ADOMs)

Administrative Domains (ADOMs)

Administrative Domains (ADOMs) enable the admin administrator to constrain other FortiAnalyzer unit administrators’ access privileges to a subset of devices in the device list. For FortiGate devices with virtual domains (VDOMs), ADOMs can further restrict access to only data from a specific FortiGate VDOM.

This section includes the following topics:

•About administrative domains (ADOMs)

•Configuring ADOMs

About administrative domains (ADOMs)

Enabling ADOMs alters the structure and available functionality of the web-based manager and CLI according to whether you are logging in as the admin administrator, and, if you are not logging in as the admin administrator, the administrator account’s assigned access profile.

Table 1: Characteristics of the CLI and web-based manager when ADOMs are enabled

	admin administrator account	Other administrators
Access to Global	Yes	No
Configuration
Access to Administrative	Yes	No
Domain Configuration (can
create ADOMs)
Can create administrator	Yes	No
accounts
Can enter all ADOMs	Yes	No

FortiAnalyzer Version 3.0 MR7 Administration Guide
05-30007-0082-20080908	19