fortimanager.SystemAdminProfile
Explore with Pulumi AI
Admin profile.
The following variables have sub resource. Avoid using them together, otherwise conflicts and overwrites may occur.
datamask_custom_fields:fortimanager.SystemAdminProfileDatamaskcustomfields
write_passwd_profiles:fortimanager.SystemAdminProfileWritepasswdprofiles
write_passwd_user_list:fortimanager.SystemAdminProfileWritepasswduserlist
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as fortimanager from "@pulumi/fortimanager";
const trname = new fortimanager.SystemAdminProfile("trname", {
    description: "terraform-tefv-description",
    profileid: "terraform-tefv-profile2",
    scope: "adom",
    type: "system",
});
import pulumi
import pulumi_fortimanager as fortimanager
trname = fortimanager.SystemAdminProfile("trname",
    description="terraform-tefv-description",
    profileid="terraform-tefv-profile2",
    scope="adom",
    type="system")
package main
import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/fortimanager/fortimanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := fortimanager.NewSystemAdminProfile(ctx, "trname", &fortimanager.SystemAdminProfileArgs{
			Description: pulumi.String("terraform-tefv-description"),
			Profileid:   pulumi.String("terraform-tefv-profile2"),
			Scope:       pulumi.String("adom"),
			Type:        pulumi.String("system"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortimanager = Pulumi.Fortimanager;
return await Deployment.RunAsync(() => 
{
    var trname = new Fortimanager.SystemAdminProfile("trname", new()
    {
        Description = "terraform-tefv-description",
        Profileid = "terraform-tefv-profile2",
        Scope = "adom",
        Type = "system",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortimanager.SystemAdminProfile;
import com.pulumi.fortimanager.SystemAdminProfileArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var trname = new SystemAdminProfile("trname", SystemAdminProfileArgs.builder()
            .description("terraform-tefv-description")
            .profileid("terraform-tefv-profile2")
            .scope("adom")
            .type("system")
            .build());
    }
}
resources:
  trname:
    type: fortimanager:SystemAdminProfile
    properties:
      description: terraform-tefv-description
      profileid: terraform-tefv-profile2
      scope: adom
      type: system
Create SystemAdminProfile Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new SystemAdminProfile(name: string, args?: SystemAdminProfileArgs, opts?: CustomResourceOptions);@overload
def SystemAdminProfile(resource_name: str,
                       args: Optional[SystemAdminProfileArgs] = None,
                       opts: Optional[ResourceOptions] = None)
@overload
def SystemAdminProfile(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       adom_admin: Optional[str] = None,
                       adom_lock: Optional[str] = None,
                       adom_policy_packages: Optional[str] = None,
                       adom_switch: Optional[str] = None,
                       allow_to_install: Optional[str] = None,
                       app_filter: Optional[str] = None,
                       assignment: Optional[str] = None,
                       change_password: Optional[str] = None,
                       config_retrieve: Optional[str] = None,
                       config_revert: Optional[str] = None,
                       consistency_check: Optional[str] = None,
                       datamask: Optional[str] = None,
                       datamask_custom_fields: Optional[Sequence[SystemAdminProfileDatamaskCustomFieldArgs]] = None,
                       datamask_custom_priority: Optional[str] = None,
                       datamask_fields: Optional[Sequence[str]] = None,
                       datamask_keys: Optional[Sequence[str]] = None,
                       datamask_unmasked_time: Optional[float] = None,
                       deploy_management: Optional[str] = None,
                       description: Optional[str] = None,
                       device_ap: Optional[str] = None,
                       device_config: Optional[str] = None,
                       device_forticlient: Optional[str] = None,
                       device_fortiextender: Optional[str] = None,
                       device_fortiswitch: Optional[str] = None,
                       device_manager: Optional[str] = None,
                       device_op: Optional[str] = None,
                       device_policy_package_lock: Optional[str] = None,
                       device_profile: Optional[str] = None,
                       device_revision_deletion: Optional[str] = None,
                       device_wan_link_load_balance: Optional[str] = None,
                       dynamic_sort_subtable: Optional[str] = None,
                       event_management: Optional[str] = None,
                       extension_access: Optional[str] = None,
                       fabric_viewer: Optional[str] = None,
                       fgd_center: Optional[str] = None,
                       fgd_center_advanced: Optional[str] = None,
                       fgd_center_fmw_mgmt: Optional[str] = None,
                       fgd_center_licensing: Optional[str] = None,
                       fgt_gui_proxy: Optional[str] = None,
                       global_policy_packages: Optional[str] = None,
                       import_policy_packages: Optional[str] = None,
                       intf_mapping: Optional[str] = None,
                       ips_baseline_cfg: Optional[str] = None,
                       ips_baseline_ovrd: Optional[str] = None,
                       ips_filter: Optional[str] = None,
                       ips_lock: Optional[str] = None,
                       ips_objects: Optional[str] = None,
                       ipv6_trusthost1: Optional[str] = None,
                       ipv6_trusthost10: Optional[str] = None,
                       ipv6_trusthost2: Optional[str] = None,
                       ipv6_trusthost3: Optional[str] = None,
                       ipv6_trusthost4: Optional[str] = None,
                       ipv6_trusthost5: Optional[str] = None,
                       ipv6_trusthost6: Optional[str] = None,
                       ipv6_trusthost7: Optional[str] = None,
                       ipv6_trusthost8: Optional[str] = None,
                       ipv6_trusthost9: Optional[str] = None,
                       log_viewer: Optional[str] = None,
                       policy_ips_attrs: Optional[str] = None,
                       policy_objects: Optional[str] = None,
                       profileid: Optional[str] = None,
                       read_passwd: Optional[str] = None,
                       realtime_monitor: Optional[str] = None,
                       report_viewer: Optional[str] = None,
                       rpc_permit: Optional[str] = None,
                       run_report: Optional[str] = None,
                       scope: Optional[str] = None,
                       script_access: Optional[str] = None,
                       set_install_targets: Optional[str] = None,
                       super_user_profile: Optional[str] = None,
                       system_admin_profile_id: Optional[str] = None,
                       system_setting: Optional[str] = None,
                       term_access: Optional[str] = None,
                       triage_events: Optional[str] = None,
                       trusthost1: Optional[str] = None,
                       trusthost10: Optional[str] = None,
                       trusthost2: Optional[str] = None,
                       trusthost3: Optional[str] = None,
                       trusthost4: Optional[str] = None,
                       trusthost5: Optional[str] = None,
                       trusthost6: Optional[str] = None,
                       trusthost7: Optional[str] = None,
                       trusthost8: Optional[str] = None,
                       trusthost9: Optional[str] = None,
                       type: Optional[str] = None,
                       update_incidents: Optional[str] = None,
                       vpn_manager: Optional[str] = None,
                       web_filter: Optional[str] = None,
                       write_passwd_access: Optional[str] = None,
                       write_passwd_profiles: Optional[Sequence[SystemAdminProfileWritePasswdProfileArgs]] = None,
                       write_passwd_user_lists: Optional[Sequence[SystemAdminProfileWritePasswdUserListArgs]] = None)func NewSystemAdminProfile(ctx *Context, name string, args *SystemAdminProfileArgs, opts ...ResourceOption) (*SystemAdminProfile, error)public SystemAdminProfile(string name, SystemAdminProfileArgs? args = null, CustomResourceOptions? opts = null)
public SystemAdminProfile(String name, SystemAdminProfileArgs args)
public SystemAdminProfile(String name, SystemAdminProfileArgs args, CustomResourceOptions options)
type: fortimanager:SystemAdminProfile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args SystemAdminProfileArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args SystemAdminProfileArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args SystemAdminProfileArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args SystemAdminProfileArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args SystemAdminProfileArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var systemAdminProfileResource = new Fortimanager.SystemAdminProfile("systemAdminProfileResource", new()
{
    AdomAdmin = "string",
    AdomLock = "string",
    AdomPolicyPackages = "string",
    AdomSwitch = "string",
    AllowToInstall = "string",
    AppFilter = "string",
    Assignment = "string",
    ChangePassword = "string",
    ConfigRetrieve = "string",
    ConfigRevert = "string",
    ConsistencyCheck = "string",
    Datamask = "string",
    DatamaskCustomFields = new[]
    {
        new Fortimanager.Inputs.SystemAdminProfileDatamaskCustomFieldArgs
        {
            FieldCategories = new[]
            {
                "string",
            },
            FieldName = "string",
            FieldStatus = "string",
            FieldType = "string",
        },
    },
    DatamaskCustomPriority = "string",
    DatamaskFields = new[]
    {
        "string",
    },
    DatamaskKeys = new[]
    {
        "string",
    },
    DatamaskUnmaskedTime = 0,
    DeployManagement = "string",
    Description = "string",
    DeviceAp = "string",
    DeviceConfig = "string",
    DeviceForticlient = "string",
    DeviceFortiextender = "string",
    DeviceFortiswitch = "string",
    DeviceManager = "string",
    DeviceOp = "string",
    DevicePolicyPackageLock = "string",
    DeviceProfile = "string",
    DeviceRevisionDeletion = "string",
    DeviceWanLinkLoadBalance = "string",
    DynamicSortSubtable = "string",
    EventManagement = "string",
    ExtensionAccess = "string",
    FabricViewer = "string",
    FgdCenter = "string",
    FgdCenterAdvanced = "string",
    FgdCenterFmwMgmt = "string",
    FgdCenterLicensing = "string",
    FgtGuiProxy = "string",
    GlobalPolicyPackages = "string",
    ImportPolicyPackages = "string",
    IntfMapping = "string",
    IpsBaselineCfg = "string",
    IpsBaselineOvrd = "string",
    IpsFilter = "string",
    IpsLock = "string",
    IpsObjects = "string",
    Ipv6Trusthost1 = "string",
    Ipv6Trusthost10 = "string",
    Ipv6Trusthost2 = "string",
    Ipv6Trusthost3 = "string",
    Ipv6Trusthost4 = "string",
    Ipv6Trusthost5 = "string",
    Ipv6Trusthost6 = "string",
    Ipv6Trusthost7 = "string",
    Ipv6Trusthost8 = "string",
    Ipv6Trusthost9 = "string",
    LogViewer = "string",
    PolicyIpsAttrs = "string",
    PolicyObjects = "string",
    Profileid = "string",
    ReadPasswd = "string",
    RealtimeMonitor = "string",
    ReportViewer = "string",
    RpcPermit = "string",
    RunReport = "string",
    Scope = "string",
    ScriptAccess = "string",
    SetInstallTargets = "string",
    SuperUserProfile = "string",
    SystemAdminProfileId = "string",
    SystemSetting = "string",
    TermAccess = "string",
    TriageEvents = "string",
    Trusthost1 = "string",
    Trusthost10 = "string",
    Trusthost2 = "string",
    Trusthost3 = "string",
    Trusthost4 = "string",
    Trusthost5 = "string",
    Trusthost6 = "string",
    Trusthost7 = "string",
    Trusthost8 = "string",
    Trusthost9 = "string",
    Type = "string",
    UpdateIncidents = "string",
    VpnManager = "string",
    WebFilter = "string",
    WritePasswdAccess = "string",
    WritePasswdProfiles = new[]
    {
        new Fortimanager.Inputs.SystemAdminProfileWritePasswdProfileArgs
        {
            Profileid = "string",
        },
    },
    WritePasswdUserLists = new[]
    {
        new Fortimanager.Inputs.SystemAdminProfileWritePasswdUserListArgs
        {
            Userid = "string",
        },
    },
});
example, err := fortimanager.NewSystemAdminProfile(ctx, "systemAdminProfileResource", &fortimanager.SystemAdminProfileArgs{
AdomAdmin: pulumi.String("string"),
AdomLock: pulumi.String("string"),
AdomPolicyPackages: pulumi.String("string"),
AdomSwitch: pulumi.String("string"),
AllowToInstall: pulumi.String("string"),
AppFilter: pulumi.String("string"),
Assignment: pulumi.String("string"),
ChangePassword: pulumi.String("string"),
ConfigRetrieve: pulumi.String("string"),
ConfigRevert: pulumi.String("string"),
ConsistencyCheck: pulumi.String("string"),
Datamask: pulumi.String("string"),
DatamaskCustomFields: .SystemAdminProfileDatamaskCustomFieldArray{
&.SystemAdminProfileDatamaskCustomFieldArgs{
FieldCategories: pulumi.StringArray{
pulumi.String("string"),
},
FieldName: pulumi.String("string"),
FieldStatus: pulumi.String("string"),
FieldType: pulumi.String("string"),
},
},
DatamaskCustomPriority: pulumi.String("string"),
DatamaskFields: pulumi.StringArray{
pulumi.String("string"),
},
DatamaskKeys: pulumi.StringArray{
pulumi.String("string"),
},
DatamaskUnmaskedTime: pulumi.Float64(0),
DeployManagement: pulumi.String("string"),
Description: pulumi.String("string"),
DeviceAp: pulumi.String("string"),
DeviceConfig: pulumi.String("string"),
DeviceForticlient: pulumi.String("string"),
DeviceFortiextender: pulumi.String("string"),
DeviceFortiswitch: pulumi.String("string"),
DeviceManager: pulumi.String("string"),
DeviceOp: pulumi.String("string"),
DevicePolicyPackageLock: pulumi.String("string"),
DeviceProfile: pulumi.String("string"),
DeviceRevisionDeletion: pulumi.String("string"),
DeviceWanLinkLoadBalance: pulumi.String("string"),
DynamicSortSubtable: pulumi.String("string"),
EventManagement: pulumi.String("string"),
ExtensionAccess: pulumi.String("string"),
FabricViewer: pulumi.String("string"),
FgdCenter: pulumi.String("string"),
FgdCenterAdvanced: pulumi.String("string"),
FgdCenterFmwMgmt: pulumi.String("string"),
FgdCenterLicensing: pulumi.String("string"),
FgtGuiProxy: pulumi.String("string"),
GlobalPolicyPackages: pulumi.String("string"),
ImportPolicyPackages: pulumi.String("string"),
IntfMapping: pulumi.String("string"),
IpsBaselineCfg: pulumi.String("string"),
IpsBaselineOvrd: pulumi.String("string"),
IpsFilter: pulumi.String("string"),
IpsLock: pulumi.String("string"),
IpsObjects: pulumi.String("string"),
Ipv6Trusthost1: pulumi.String("string"),
Ipv6Trusthost10: pulumi.String("string"),
Ipv6Trusthost2: pulumi.String("string"),
Ipv6Trusthost3: pulumi.String("string"),
Ipv6Trusthost4: pulumi.String("string"),
Ipv6Trusthost5: pulumi.String("string"),
Ipv6Trusthost6: pulumi.String("string"),
Ipv6Trusthost7: pulumi.String("string"),
Ipv6Trusthost8: pulumi.String("string"),
Ipv6Trusthost9: pulumi.String("string"),
LogViewer: pulumi.String("string"),
PolicyIpsAttrs: pulumi.String("string"),
PolicyObjects: pulumi.String("string"),
Profileid: pulumi.String("string"),
ReadPasswd: pulumi.String("string"),
RealtimeMonitor: pulumi.String("string"),
ReportViewer: pulumi.String("string"),
RpcPermit: pulumi.String("string"),
RunReport: pulumi.String("string"),
Scope: pulumi.String("string"),
ScriptAccess: pulumi.String("string"),
SetInstallTargets: pulumi.String("string"),
SuperUserProfile: pulumi.String("string"),
SystemAdminProfileId: pulumi.String("string"),
SystemSetting: pulumi.String("string"),
TermAccess: pulumi.String("string"),
TriageEvents: pulumi.String("string"),
Trusthost1: pulumi.String("string"),
Trusthost10: pulumi.String("string"),
Trusthost2: pulumi.String("string"),
Trusthost3: pulumi.String("string"),
Trusthost4: pulumi.String("string"),
Trusthost5: pulumi.String("string"),
Trusthost6: pulumi.String("string"),
Trusthost7: pulumi.String("string"),
Trusthost8: pulumi.String("string"),
Trusthost9: pulumi.String("string"),
Type: pulumi.String("string"),
UpdateIncidents: pulumi.String("string"),
VpnManager: pulumi.String("string"),
WebFilter: pulumi.String("string"),
WritePasswdAccess: pulumi.String("string"),
WritePasswdProfiles: .SystemAdminProfileWritePasswdProfileArray{
&.SystemAdminProfileWritePasswdProfileArgs{
Profileid: pulumi.String("string"),
},
},
WritePasswdUserLists: .SystemAdminProfileWritePasswdUserListTypeArray{
&.SystemAdminProfileWritePasswdUserListTypeArgs{
Userid: pulumi.String("string"),
},
},
})
var systemAdminProfileResource = new SystemAdminProfile("systemAdminProfileResource", SystemAdminProfileArgs.builder()
    .adomAdmin("string")
    .adomLock("string")
    .adomPolicyPackages("string")
    .adomSwitch("string")
    .allowToInstall("string")
    .appFilter("string")
    .assignment("string")
    .changePassword("string")
    .configRetrieve("string")
    .configRevert("string")
    .consistencyCheck("string")
    .datamask("string")
    .datamaskCustomFields(SystemAdminProfileDatamaskCustomFieldArgs.builder()
        .fieldCategories("string")
        .fieldName("string")
        .fieldStatus("string")
        .fieldType("string")
        .build())
    .datamaskCustomPriority("string")
    .datamaskFields("string")
    .datamaskKeys("string")
    .datamaskUnmaskedTime(0)
    .deployManagement("string")
    .description("string")
    .deviceAp("string")
    .deviceConfig("string")
    .deviceForticlient("string")
    .deviceFortiextender("string")
    .deviceFortiswitch("string")
    .deviceManager("string")
    .deviceOp("string")
    .devicePolicyPackageLock("string")
    .deviceProfile("string")
    .deviceRevisionDeletion("string")
    .deviceWanLinkLoadBalance("string")
    .dynamicSortSubtable("string")
    .eventManagement("string")
    .extensionAccess("string")
    .fabricViewer("string")
    .fgdCenter("string")
    .fgdCenterAdvanced("string")
    .fgdCenterFmwMgmt("string")
    .fgdCenterLicensing("string")
    .fgtGuiProxy("string")
    .globalPolicyPackages("string")
    .importPolicyPackages("string")
    .intfMapping("string")
    .ipsBaselineCfg("string")
    .ipsBaselineOvrd("string")
    .ipsFilter("string")
    .ipsLock("string")
    .ipsObjects("string")
    .ipv6Trusthost1("string")
    .ipv6Trusthost10("string")
    .ipv6Trusthost2("string")
    .ipv6Trusthost3("string")
    .ipv6Trusthost4("string")
    .ipv6Trusthost5("string")
    .ipv6Trusthost6("string")
    .ipv6Trusthost7("string")
    .ipv6Trusthost8("string")
    .ipv6Trusthost9("string")
    .logViewer("string")
    .policyIpsAttrs("string")
    .policyObjects("string")
    .profileid("string")
    .readPasswd("string")
    .realtimeMonitor("string")
    .reportViewer("string")
    .rpcPermit("string")
    .runReport("string")
    .scope("string")
    .scriptAccess("string")
    .setInstallTargets("string")
    .superUserProfile("string")
    .systemAdminProfileId("string")
    .systemSetting("string")
    .termAccess("string")
    .triageEvents("string")
    .trusthost1("string")
    .trusthost10("string")
    .trusthost2("string")
    .trusthost3("string")
    .trusthost4("string")
    .trusthost5("string")
    .trusthost6("string")
    .trusthost7("string")
    .trusthost8("string")
    .trusthost9("string")
    .type("string")
    .updateIncidents("string")
    .vpnManager("string")
    .webFilter("string")
    .writePasswdAccess("string")
    .writePasswdProfiles(SystemAdminProfileWritePasswdProfileArgs.builder()
        .profileid("string")
        .build())
    .writePasswdUserLists(SystemAdminProfileWritePasswdUserListArgs.builder()
        .userid("string")
        .build())
    .build());
system_admin_profile_resource = fortimanager.SystemAdminProfile("systemAdminProfileResource",
    adom_admin="string",
    adom_lock="string",
    adom_policy_packages="string",
    adom_switch="string",
    allow_to_install="string",
    app_filter="string",
    assignment="string",
    change_password="string",
    config_retrieve="string",
    config_revert="string",
    consistency_check="string",
    datamask="string",
    datamask_custom_fields=[{
        "field_categories": ["string"],
        "field_name": "string",
        "field_status": "string",
        "field_type": "string",
    }],
    datamask_custom_priority="string",
    datamask_fields=["string"],
    datamask_keys=["string"],
    datamask_unmasked_time=0,
    deploy_management="string",
    description="string",
    device_ap="string",
    device_config="string",
    device_forticlient="string",
    device_fortiextender="string",
    device_fortiswitch="string",
    device_manager="string",
    device_op="string",
    device_policy_package_lock="string",
    device_profile="string",
    device_revision_deletion="string",
    device_wan_link_load_balance="string",
    dynamic_sort_subtable="string",
    event_management="string",
    extension_access="string",
    fabric_viewer="string",
    fgd_center="string",
    fgd_center_advanced="string",
    fgd_center_fmw_mgmt="string",
    fgd_center_licensing="string",
    fgt_gui_proxy="string",
    global_policy_packages="string",
    import_policy_packages="string",
    intf_mapping="string",
    ips_baseline_cfg="string",
    ips_baseline_ovrd="string",
    ips_filter="string",
    ips_lock="string",
    ips_objects="string",
    ipv6_trusthost1="string",
    ipv6_trusthost10="string",
    ipv6_trusthost2="string",
    ipv6_trusthost3="string",
    ipv6_trusthost4="string",
    ipv6_trusthost5="string",
    ipv6_trusthost6="string",
    ipv6_trusthost7="string",
    ipv6_trusthost8="string",
    ipv6_trusthost9="string",
    log_viewer="string",
    policy_ips_attrs="string",
    policy_objects="string",
    profileid="string",
    read_passwd="string",
    realtime_monitor="string",
    report_viewer="string",
    rpc_permit="string",
    run_report="string",
    scope="string",
    script_access="string",
    set_install_targets="string",
    super_user_profile="string",
    system_admin_profile_id="string",
    system_setting="string",
    term_access="string",
    triage_events="string",
    trusthost1="string",
    trusthost10="string",
    trusthost2="string",
    trusthost3="string",
    trusthost4="string",
    trusthost5="string",
    trusthost6="string",
    trusthost7="string",
    trusthost8="string",
    trusthost9="string",
    type="string",
    update_incidents="string",
    vpn_manager="string",
    web_filter="string",
    write_passwd_access="string",
    write_passwd_profiles=[{
        "profileid": "string",
    }],
    write_passwd_user_lists=[{
        "userid": "string",
    }])
const systemAdminProfileResource = new fortimanager.SystemAdminProfile("systemAdminProfileResource", {
    adomAdmin: "string",
    adomLock: "string",
    adomPolicyPackages: "string",
    adomSwitch: "string",
    allowToInstall: "string",
    appFilter: "string",
    assignment: "string",
    changePassword: "string",
    configRetrieve: "string",
    configRevert: "string",
    consistencyCheck: "string",
    datamask: "string",
    datamaskCustomFields: [{
        fieldCategories: ["string"],
        fieldName: "string",
        fieldStatus: "string",
        fieldType: "string",
    }],
    datamaskCustomPriority: "string",
    datamaskFields: ["string"],
    datamaskKeys: ["string"],
    datamaskUnmaskedTime: 0,
    deployManagement: "string",
    description: "string",
    deviceAp: "string",
    deviceConfig: "string",
    deviceForticlient: "string",
    deviceFortiextender: "string",
    deviceFortiswitch: "string",
    deviceManager: "string",
    deviceOp: "string",
    devicePolicyPackageLock: "string",
    deviceProfile: "string",
    deviceRevisionDeletion: "string",
    deviceWanLinkLoadBalance: "string",
    dynamicSortSubtable: "string",
    eventManagement: "string",
    extensionAccess: "string",
    fabricViewer: "string",
    fgdCenter: "string",
    fgdCenterAdvanced: "string",
    fgdCenterFmwMgmt: "string",
    fgdCenterLicensing: "string",
    fgtGuiProxy: "string",
    globalPolicyPackages: "string",
    importPolicyPackages: "string",
    intfMapping: "string",
    ipsBaselineCfg: "string",
    ipsBaselineOvrd: "string",
    ipsFilter: "string",
    ipsLock: "string",
    ipsObjects: "string",
    ipv6Trusthost1: "string",
    ipv6Trusthost10: "string",
    ipv6Trusthost2: "string",
    ipv6Trusthost3: "string",
    ipv6Trusthost4: "string",
    ipv6Trusthost5: "string",
    ipv6Trusthost6: "string",
    ipv6Trusthost7: "string",
    ipv6Trusthost8: "string",
    ipv6Trusthost9: "string",
    logViewer: "string",
    policyIpsAttrs: "string",
    policyObjects: "string",
    profileid: "string",
    readPasswd: "string",
    realtimeMonitor: "string",
    reportViewer: "string",
    rpcPermit: "string",
    runReport: "string",
    scope: "string",
    scriptAccess: "string",
    setInstallTargets: "string",
    superUserProfile: "string",
    systemAdminProfileId: "string",
    systemSetting: "string",
    termAccess: "string",
    triageEvents: "string",
    trusthost1: "string",
    trusthost10: "string",
    trusthost2: "string",
    trusthost3: "string",
    trusthost4: "string",
    trusthost5: "string",
    trusthost6: "string",
    trusthost7: "string",
    trusthost8: "string",
    trusthost9: "string",
    type: "string",
    updateIncidents: "string",
    vpnManager: "string",
    webFilter: "string",
    writePasswdAccess: "string",
    writePasswdProfiles: [{
        profileid: "string",
    }],
    writePasswdUserLists: [{
        userid: "string",
    }],
});
type: fortimanager:SystemAdminProfile
properties:
    adomAdmin: string
    adomLock: string
    adomPolicyPackages: string
    adomSwitch: string
    allowToInstall: string
    appFilter: string
    assignment: string
    changePassword: string
    configRetrieve: string
    configRevert: string
    consistencyCheck: string
    datamask: string
    datamaskCustomFields:
        - fieldCategories:
            - string
          fieldName: string
          fieldStatus: string
          fieldType: string
    datamaskCustomPriority: string
    datamaskFields:
        - string
    datamaskKeys:
        - string
    datamaskUnmaskedTime: 0
    deployManagement: string
    description: string
    deviceAp: string
    deviceConfig: string
    deviceForticlient: string
    deviceFortiextender: string
    deviceFortiswitch: string
    deviceManager: string
    deviceOp: string
    devicePolicyPackageLock: string
    deviceProfile: string
    deviceRevisionDeletion: string
    deviceWanLinkLoadBalance: string
    dynamicSortSubtable: string
    eventManagement: string
    extensionAccess: string
    fabricViewer: string
    fgdCenter: string
    fgdCenterAdvanced: string
    fgdCenterFmwMgmt: string
    fgdCenterLicensing: string
    fgtGuiProxy: string
    globalPolicyPackages: string
    importPolicyPackages: string
    intfMapping: string
    ipsBaselineCfg: string
    ipsBaselineOvrd: string
    ipsFilter: string
    ipsLock: string
    ipsObjects: string
    ipv6Trusthost1: string
    ipv6Trusthost2: string
    ipv6Trusthost3: string
    ipv6Trusthost4: string
    ipv6Trusthost5: string
    ipv6Trusthost6: string
    ipv6Trusthost7: string
    ipv6Trusthost8: string
    ipv6Trusthost9: string
    ipv6Trusthost10: string
    logViewer: string
    policyIpsAttrs: string
    policyObjects: string
    profileid: string
    readPasswd: string
    realtimeMonitor: string
    reportViewer: string
    rpcPermit: string
    runReport: string
    scope: string
    scriptAccess: string
    setInstallTargets: string
    superUserProfile: string
    systemAdminProfileId: string
    systemSetting: string
    termAccess: string
    triageEvents: string
    trusthost1: string
    trusthost2: string
    trusthost3: string
    trusthost4: string
    trusthost5: string
    trusthost6: string
    trusthost7: string
    trusthost8: string
    trusthost9: string
    trusthost10: string
    type: string
    updateIncidents: string
    vpnManager: string
    webFilter: string
    writePasswdAccess: string
    writePasswdProfiles:
        - profileid: string
    writePasswdUserLists:
        - userid: string
SystemAdminProfile Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The SystemAdminProfile resource accepts the following input properties:
- AdomAdmin string
- Enable Adom Admin. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- AdomLock string
- ADOM locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- AdomPolicy stringPackages 
- ADOM policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- AdomSwitch string
- Administrator domain. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- AllowTo stringInstall 
- Enable/disable the restricted user to install objects to the devices. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- AppFilter string
- App filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- Assignment string
- Assignment permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ChangePassword string
- Enable/disable the user to change self password. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ConfigRetrieve string
- Configuration retrieve. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ConfigRevert string
- Revert Configuration from Revision History none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ConsistencyCheck string
- Consistency check. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Datamask string
- Enable/disable data masking. disable - Disable data masking. enable - Enable data masking. Valid values: disable,enable.
- DatamaskCustom List<SystemFields Admin Profile Datamask Custom Field> 
- Datamask-Custom-Fields. The structure of datamask_custom_fieldsblock is documented below.
- DatamaskCustom stringPriority 
- Prioritize custom fields. disable - Disable custom field search priority. enable - Enable custom field search priority. Valid values: disable,enable.
- DatamaskFields List<string>
- Data masking fields. user - User name. srcip - Source IP. srcname - Source name. srcmac - Source MAC. dstip - Destination IP. dstname - Dst name. email - Email. message - Message. domain - Domain. Valid values: user,srcip,srcname,srcmac,dstip,dstname,email,message,domain.
- DatamaskKeys List<string>
- Data masking encryption key.
- DatamaskUnmasked doubleTime 
- Time in days without data masking.
- DeployManagement string
- Install to devices. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Description string
- Description.
- DeviceAp string
- Manage AP. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceConfig string
- Manage device configurations. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceForticlient string
- Manage FortiClient. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceFortiextender string
- Manage FortiExtender. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceFortiswitch string
- Manage FortiSwitch. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceManager string
- Device manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceOp string
- Device add/delete/edit. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DevicePolicy stringPackage Lock 
- Device/Policy Package locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceProfile string
- Device profile permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceRevision stringDeletion 
- Delete device revision. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceWan stringLink Load Balance 
- Manage WAN link load balance. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DynamicSort stringSubtable 
- true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- EventManagement string
- Event management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ExtensionAccess string
- Manage extension access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FabricViewer string
- Fabric viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter string
- FortiGuard Center. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter stringAdvanced 
- FortiGuard Center Advanced. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter stringFmw Mgmt 
- FortiGuard Center Firmware Management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter stringLicensing 
- FortiGuard Center Licensing. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgtGui stringProxy 
- FortiGate GUI proxy. disable - No permission. enable - With permission. Valid values: disable,enable.
- GlobalPolicy stringPackages 
- Global policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ImportPolicy stringPackages 
- Import Policy Package. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IntfMapping string
- Interface Mapping none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IpsBaseline stringCfg 
- Ips baseline sensor configration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IpsBaseline stringOvrd 
- Enable/disable override baseline ips sensor. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- IpsFilter string
- IPS filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- IpsLock string
- IPS locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IpsObjects string
- Ips objects configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Ipv6Trusthost1 string
- Admin user trusted host IPv6, default ::/0 for all.
- Ipv6Trusthost10 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost2 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost3 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost4 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost5 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost6 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost7 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost8 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost9 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- LogViewer string
- Log viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- PolicyIps stringAttrs 
- Policy ips attributes configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- PolicyObjects string
- Policy objects permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Profileid string
- Profile ID.
- ReadPasswd string
- View password in clear text. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- RealtimeMonitor string
- Realtime monitor. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ReportViewer string
- Report viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- RpcPermit string
- Set none/read/read-write rpc-permission read-write - Read-write permission. none - No permission. read - Read-only permission. Valid values: read-write,none,read.
- RunReport string
- Run reports. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Scope string
- Scope. global - Global scope. adom - ADOM scope. Valid values: global,adom.
- ScriptAccess string
- Script access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- SetInstall stringTargets 
- Edit installation targets. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- SuperUser stringProfile 
- Enable/disable super user profile disable - Disable super user profile enable - Enable super user profile Valid values: disable,enable.
- SystemAdmin stringProfile Id 
- an identifier for the resource with format {{profileid}}.
- SystemSetting string
- System setting. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- TermAccess string
- Terminal access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- TriageEvents string
- Triage events. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Trusthost1 string
- Admin user trusted host IP, default 0.0.0.0 0.0.0.0 for all.
- Trusthost10 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost2 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost3 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost4 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost5 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost6 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost7 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost8 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost9 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Type string
- profile type. system - System admin. restricted - Restricted admin. Valid values: system,restricted.
- UpdateIncidents string
- Create/update incidents. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- VpnManager string
- VPN manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- WebFilter string
- Web filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- WritePasswd stringAccess 
- set all/specify-by-user/specify-by-profile write password access mode. all - All except super users. specify-by-user - Specify by user. specify-by-profile - Specify by profile. Valid values: all,specify-by-user,specify-by-profile.
- WritePasswd List<SystemProfiles Admin Profile Write Passwd Profile> 
- Write-Passwd-Profiles. The structure of write_passwd_profilesblock is documented below.
- WritePasswd List<SystemUser Lists Admin Profile Write Passwd User List> 
- Write-Passwd-User-List. The structure of write_passwd_user_listblock is documented below.
- AdomAdmin string
- Enable Adom Admin. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- AdomLock string
- ADOM locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- AdomPolicy stringPackages 
- ADOM policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- AdomSwitch string
- Administrator domain. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- AllowTo stringInstall 
- Enable/disable the restricted user to install objects to the devices. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- AppFilter string
- App filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- Assignment string
- Assignment permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ChangePassword string
- Enable/disable the user to change self password. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ConfigRetrieve string
- Configuration retrieve. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ConfigRevert string
- Revert Configuration from Revision History none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ConsistencyCheck string
- Consistency check. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Datamask string
- Enable/disable data masking. disable - Disable data masking. enable - Enable data masking. Valid values: disable,enable.
- DatamaskCustom []SystemFields Admin Profile Datamask Custom Field Args 
- Datamask-Custom-Fields. The structure of datamask_custom_fieldsblock is documented below.
- DatamaskCustom stringPriority 
- Prioritize custom fields. disable - Disable custom field search priority. enable - Enable custom field search priority. Valid values: disable,enable.
- DatamaskFields []string
- Data masking fields. user - User name. srcip - Source IP. srcname - Source name. srcmac - Source MAC. dstip - Destination IP. dstname - Dst name. email - Email. message - Message. domain - Domain. Valid values: user,srcip,srcname,srcmac,dstip,dstname,email,message,domain.
- DatamaskKeys []string
- Data masking encryption key.
- DatamaskUnmasked float64Time 
- Time in days without data masking.
- DeployManagement string
- Install to devices. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Description string
- Description.
- DeviceAp string
- Manage AP. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceConfig string
- Manage device configurations. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceForticlient string
- Manage FortiClient. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceFortiextender string
- Manage FortiExtender. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceFortiswitch string
- Manage FortiSwitch. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceManager string
- Device manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceOp string
- Device add/delete/edit. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DevicePolicy stringPackage Lock 
- Device/Policy Package locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceProfile string
- Device profile permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceRevision stringDeletion 
- Delete device revision. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceWan stringLink Load Balance 
- Manage WAN link load balance. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DynamicSort stringSubtable 
- true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- EventManagement string
- Event management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ExtensionAccess string
- Manage extension access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FabricViewer string
- Fabric viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter string
- FortiGuard Center. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter stringAdvanced 
- FortiGuard Center Advanced. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter stringFmw Mgmt 
- FortiGuard Center Firmware Management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter stringLicensing 
- FortiGuard Center Licensing. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgtGui stringProxy 
- FortiGate GUI proxy. disable - No permission. enable - With permission. Valid values: disable,enable.
- GlobalPolicy stringPackages 
- Global policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ImportPolicy stringPackages 
- Import Policy Package. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IntfMapping string
- Interface Mapping none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IpsBaseline stringCfg 
- Ips baseline sensor configration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IpsBaseline stringOvrd 
- Enable/disable override baseline ips sensor. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- IpsFilter string
- IPS filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- IpsLock string
- IPS locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IpsObjects string
- Ips objects configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Ipv6Trusthost1 string
- Admin user trusted host IPv6, default ::/0 for all.
- Ipv6Trusthost10 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost2 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost3 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost4 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost5 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost6 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost7 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost8 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost9 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- LogViewer string
- Log viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- PolicyIps stringAttrs 
- Policy ips attributes configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- PolicyObjects string
- Policy objects permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Profileid string
- Profile ID.
- ReadPasswd string
- View password in clear text. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- RealtimeMonitor string
- Realtime monitor. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ReportViewer string
- Report viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- RpcPermit string
- Set none/read/read-write rpc-permission read-write - Read-write permission. none - No permission. read - Read-only permission. Valid values: read-write,none,read.
- RunReport string
- Run reports. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Scope string
- Scope. global - Global scope. adom - ADOM scope. Valid values: global,adom.
- ScriptAccess string
- Script access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- SetInstall stringTargets 
- Edit installation targets. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- SuperUser stringProfile 
- Enable/disable super user profile disable - Disable super user profile enable - Enable super user profile Valid values: disable,enable.
- SystemAdmin stringProfile Id 
- an identifier for the resource with format {{profileid}}.
- SystemSetting string
- System setting. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- TermAccess string
- Terminal access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- TriageEvents string
- Triage events. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Trusthost1 string
- Admin user trusted host IP, default 0.0.0.0 0.0.0.0 for all.
- Trusthost10 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost2 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost3 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost4 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost5 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost6 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost7 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost8 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost9 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Type string
- profile type. system - System admin. restricted - Restricted admin. Valid values: system,restricted.
- UpdateIncidents string
- Create/update incidents. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- VpnManager string
- VPN manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- WebFilter string
- Web filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- WritePasswd stringAccess 
- set all/specify-by-user/specify-by-profile write password access mode. all - All except super users. specify-by-user - Specify by user. specify-by-profile - Specify by profile. Valid values: all,specify-by-user,specify-by-profile.
- WritePasswd []SystemProfiles Admin Profile Write Passwd Profile Args 
- Write-Passwd-Profiles. The structure of write_passwd_profilesblock is documented below.
- WritePasswd []SystemUser Lists Admin Profile Write Passwd User List Type Args 
- Write-Passwd-User-List. The structure of write_passwd_user_listblock is documented below.
- adomAdmin String
- Enable Adom Admin. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- adomLock String
- ADOM locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adomPolicy StringPackages 
- ADOM policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adomSwitch String
- Administrator domain. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- allowTo StringInstall 
- Enable/disable the restricted user to install objects to the devices. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- appFilter String
- App filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- assignment String
- Assignment permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- changePassword String
- Enable/disable the user to change self password. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- configRetrieve String
- Configuration retrieve. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- configRevert String
- Revert Configuration from Revision History none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- consistencyCheck String
- Consistency check. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- datamask String
- Enable/disable data masking. disable - Disable data masking. enable - Enable data masking. Valid values: disable,enable.
- datamaskCustom List<SystemFields Admin Profile Datamask Custom Field> 
- Datamask-Custom-Fields. The structure of datamask_custom_fieldsblock is documented below.
- datamaskCustom StringPriority 
- Prioritize custom fields. disable - Disable custom field search priority. enable - Enable custom field search priority. Valid values: disable,enable.
- datamaskFields List<String>
- Data masking fields. user - User name. srcip - Source IP. srcname - Source name. srcmac - Source MAC. dstip - Destination IP. dstname - Dst name. email - Email. message - Message. domain - Domain. Valid values: user,srcip,srcname,srcmac,dstip,dstname,email,message,domain.
- datamaskKeys List<String>
- Data masking encryption key.
- datamaskUnmasked DoubleTime 
- Time in days without data masking.
- deployManagement String
- Install to devices. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- description String
- Description.
- deviceAp String
- Manage AP. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceConfig String
- Manage device configurations. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceForticlient String
- Manage FortiClient. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceFortiextender String
- Manage FortiExtender. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceFortiswitch String
- Manage FortiSwitch. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceManager String
- Device manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceOp String
- Device add/delete/edit. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- devicePolicy StringPackage Lock 
- Device/Policy Package locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceProfile String
- Device profile permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceRevision StringDeletion 
- Delete device revision. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceWan StringLink Load Balance 
- Manage WAN link load balance. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- dynamicSort StringSubtable 
- true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- eventManagement String
- Event management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- extensionAccess String
- Manage extension access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fabricViewer String
- Fabric viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter String
- FortiGuard Center. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter StringAdvanced 
- FortiGuard Center Advanced. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter StringFmw Mgmt 
- FortiGuard Center Firmware Management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter StringLicensing 
- FortiGuard Center Licensing. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgtGui StringProxy 
- FortiGate GUI proxy. disable - No permission. enable - With permission. Valid values: disable,enable.
- globalPolicy StringPackages 
- Global policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- importPolicy StringPackages 
- Import Policy Package. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- intfMapping String
- Interface Mapping none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsBaseline StringCfg 
- Ips baseline sensor configration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsBaseline StringOvrd 
- Enable/disable override baseline ips sensor. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ipsFilter String
- IPS filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ipsLock String
- IPS locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsObjects String
- Ips objects configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipv6Trusthost1 String
- Admin user trusted host IPv6, default ::/0 for all.
- ipv6Trusthost10 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost2 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost3 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost4 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost5 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost6 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost7 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost8 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost9 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- logViewer String
- Log viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policyIps StringAttrs 
- Policy ips attributes configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policyObjects String
- Policy objects permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- profileid String
- Profile ID.
- readPasswd String
- View password in clear text. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- realtimeMonitor String
- Realtime monitor. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- reportViewer String
- Report viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- rpcPermit String
- Set none/read/read-write rpc-permission read-write - Read-write permission. none - No permission. read - Read-only permission. Valid values: read-write,none,read.
- runReport String
- Run reports. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- scope String
- Scope. global - Global scope. adom - ADOM scope. Valid values: global,adom.
- scriptAccess String
- Script access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- setInstall StringTargets 
- Edit installation targets. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- superUser StringProfile 
- Enable/disable super user profile disable - Disable super user profile enable - Enable super user profile Valid values: disable,enable.
- systemAdmin StringProfile Id 
- an identifier for the resource with format {{profileid}}.
- systemSetting String
- System setting. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- termAccess String
- Terminal access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- triageEvents String
- Triage events. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- trusthost1 String
- Admin user trusted host IP, default 0.0.0.0 0.0.0.0 for all.
- trusthost10 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost2 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost3 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost4 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost5 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost6 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost7 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost8 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost9 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- type String
- profile type. system - System admin. restricted - Restricted admin. Valid values: system,restricted.
- updateIncidents String
- Create/update incidents. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- vpnManager String
- VPN manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- webFilter String
- Web filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- writePasswd StringAccess 
- set all/specify-by-user/specify-by-profile write password access mode. all - All except super users. specify-by-user - Specify by user. specify-by-profile - Specify by profile. Valid values: all,specify-by-user,specify-by-profile.
- writePasswd List<SystemProfiles Admin Profile Write Passwd Profile> 
- Write-Passwd-Profiles. The structure of write_passwd_profilesblock is documented below.
- writePasswd List<SystemUser Lists Admin Profile Write Passwd User List> 
- Write-Passwd-User-List. The structure of write_passwd_user_listblock is documented below.
- adomAdmin string
- Enable Adom Admin. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- adomLock string
- ADOM locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adomPolicy stringPackages 
- ADOM policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adomSwitch string
- Administrator domain. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- allowTo stringInstall 
- Enable/disable the restricted user to install objects to the devices. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- appFilter string
- App filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- assignment string
- Assignment permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- changePassword string
- Enable/disable the user to change self password. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- configRetrieve string
- Configuration retrieve. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- configRevert string
- Revert Configuration from Revision History none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- consistencyCheck string
- Consistency check. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- datamask string
- Enable/disable data masking. disable - Disable data masking. enable - Enable data masking. Valid values: disable,enable.
- datamaskCustom SystemFields Admin Profile Datamask Custom Field[] 
- Datamask-Custom-Fields. The structure of datamask_custom_fieldsblock is documented below.
- datamaskCustom stringPriority 
- Prioritize custom fields. disable - Disable custom field search priority. enable - Enable custom field search priority. Valid values: disable,enable.
- datamaskFields string[]
- Data masking fields. user - User name. srcip - Source IP. srcname - Source name. srcmac - Source MAC. dstip - Destination IP. dstname - Dst name. email - Email. message - Message. domain - Domain. Valid values: user,srcip,srcname,srcmac,dstip,dstname,email,message,domain.
- datamaskKeys string[]
- Data masking encryption key.
- datamaskUnmasked numberTime 
- Time in days without data masking.
- deployManagement string
- Install to devices. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- description string
- Description.
- deviceAp string
- Manage AP. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceConfig string
- Manage device configurations. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceForticlient string
- Manage FortiClient. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceFortiextender string
- Manage FortiExtender. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceFortiswitch string
- Manage FortiSwitch. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceManager string
- Device manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceOp string
- Device add/delete/edit. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- devicePolicy stringPackage Lock 
- Device/Policy Package locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceProfile string
- Device profile permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceRevision stringDeletion 
- Delete device revision. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceWan stringLink Load Balance 
- Manage WAN link load balance. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- dynamicSort stringSubtable 
- true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- eventManagement string
- Event management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- extensionAccess string
- Manage extension access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fabricViewer string
- Fabric viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter string
- FortiGuard Center. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter stringAdvanced 
- FortiGuard Center Advanced. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter stringFmw Mgmt 
- FortiGuard Center Firmware Management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter stringLicensing 
- FortiGuard Center Licensing. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgtGui stringProxy 
- FortiGate GUI proxy. disable - No permission. enable - With permission. Valid values: disable,enable.
- globalPolicy stringPackages 
- Global policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- importPolicy stringPackages 
- Import Policy Package. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- intfMapping string
- Interface Mapping none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsBaseline stringCfg 
- Ips baseline sensor configration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsBaseline stringOvrd 
- Enable/disable override baseline ips sensor. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ipsFilter string
- IPS filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ipsLock string
- IPS locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsObjects string
- Ips objects configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipv6Trusthost1 string
- Admin user trusted host IPv6, default ::/0 for all.
- ipv6Trusthost10 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost2 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost3 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost4 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost5 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost6 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost7 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost8 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost9 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- logViewer string
- Log viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policyIps stringAttrs 
- Policy ips attributes configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policyObjects string
- Policy objects permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- profileid string
- Profile ID.
- readPasswd string
- View password in clear text. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- realtimeMonitor string
- Realtime monitor. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- reportViewer string
- Report viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- rpcPermit string
- Set none/read/read-write rpc-permission read-write - Read-write permission. none - No permission. read - Read-only permission. Valid values: read-write,none,read.
- runReport string
- Run reports. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- scope string
- Scope. global - Global scope. adom - ADOM scope. Valid values: global,adom.
- scriptAccess string
- Script access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- setInstall stringTargets 
- Edit installation targets. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- superUser stringProfile 
- Enable/disable super user profile disable - Disable super user profile enable - Enable super user profile Valid values: disable,enable.
- systemAdmin stringProfile Id 
- an identifier for the resource with format {{profileid}}.
- systemSetting string
- System setting. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- termAccess string
- Terminal access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- triageEvents string
- Triage events. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- trusthost1 string
- Admin user trusted host IP, default 0.0.0.0 0.0.0.0 for all.
- trusthost10 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost2 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost3 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost4 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost5 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost6 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost7 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost8 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost9 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- type string
- profile type. system - System admin. restricted - Restricted admin. Valid values: system,restricted.
- updateIncidents string
- Create/update incidents. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- vpnManager string
- VPN manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- webFilter string
- Web filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- writePasswd stringAccess 
- set all/specify-by-user/specify-by-profile write password access mode. all - All except super users. specify-by-user - Specify by user. specify-by-profile - Specify by profile. Valid values: all,specify-by-user,specify-by-profile.
- writePasswd SystemProfiles Admin Profile Write Passwd Profile[] 
- Write-Passwd-Profiles. The structure of write_passwd_profilesblock is documented below.
- writePasswd SystemUser Lists Admin Profile Write Passwd User List[] 
- Write-Passwd-User-List. The structure of write_passwd_user_listblock is documented below.
- adom_admin str
- Enable Adom Admin. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- adom_lock str
- ADOM locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adom_policy_ strpackages 
- ADOM policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adom_switch str
- Administrator domain. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- allow_to_ strinstall 
- Enable/disable the restricted user to install objects to the devices. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- app_filter str
- App filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- assignment str
- Assignment permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- change_password str
- Enable/disable the user to change self password. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- config_retrieve str
- Configuration retrieve. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- config_revert str
- Revert Configuration from Revision History none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- consistency_check str
- Consistency check. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- datamask str
- Enable/disable data masking. disable - Disable data masking. enable - Enable data masking. Valid values: disable,enable.
- datamask_custom_ Sequence[Systemfields Admin Profile Datamask Custom Field Args] 
- Datamask-Custom-Fields. The structure of datamask_custom_fieldsblock is documented below.
- datamask_custom_ strpriority 
- Prioritize custom fields. disable - Disable custom field search priority. enable - Enable custom field search priority. Valid values: disable,enable.
- datamask_fields Sequence[str]
- Data masking fields. user - User name. srcip - Source IP. srcname - Source name. srcmac - Source MAC. dstip - Destination IP. dstname - Dst name. email - Email. message - Message. domain - Domain. Valid values: user,srcip,srcname,srcmac,dstip,dstname,email,message,domain.
- datamask_keys Sequence[str]
- Data masking encryption key.
- datamask_unmasked_ floattime 
- Time in days without data masking.
- deploy_management str
- Install to devices. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- description str
- Description.
- device_ap str
- Manage AP. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_config str
- Manage device configurations. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_forticlient str
- Manage FortiClient. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_fortiextender str
- Manage FortiExtender. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_fortiswitch str
- Manage FortiSwitch. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_manager str
- Device manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_op str
- Device add/delete/edit. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_policy_ strpackage_ lock 
- Device/Policy Package locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_profile str
- Device profile permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_revision_ strdeletion 
- Delete device revision. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_wan_ strlink_ load_ balance 
- Manage WAN link load balance. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- dynamic_sort_ strsubtable 
- true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- event_management str
- Event management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- extension_access str
- Manage extension access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fabric_viewer str
- Fabric viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgd_center str
- FortiGuard Center. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgd_center_ stradvanced 
- FortiGuard Center Advanced. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgd_center_ strfmw_ mgmt 
- FortiGuard Center Firmware Management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgd_center_ strlicensing 
- FortiGuard Center Licensing. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgt_gui_ strproxy 
- FortiGate GUI proxy. disable - No permission. enable - With permission. Valid values: disable,enable.
- global_policy_ strpackages 
- Global policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- import_policy_ strpackages 
- Import Policy Package. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- intf_mapping str
- Interface Mapping none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ips_baseline_ strcfg 
- Ips baseline sensor configration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ips_baseline_ strovrd 
- Enable/disable override baseline ips sensor. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ips_filter str
- IPS filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ips_lock str
- IPS locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ips_objects str
- Ips objects configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipv6_trusthost1 str
- Admin user trusted host IPv6, default ::/0 for all.
- ipv6_trusthost10 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost2 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost3 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost4 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost5 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost6 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost7 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost8 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost9 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- log_viewer str
- Log viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policy_ips_ strattrs 
- Policy ips attributes configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policy_objects str
- Policy objects permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- profileid str
- Profile ID.
- read_passwd str
- View password in clear text. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- realtime_monitor str
- Realtime monitor. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- report_viewer str
- Report viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- rpc_permit str
- Set none/read/read-write rpc-permission read-write - Read-write permission. none - No permission. read - Read-only permission. Valid values: read-write,none,read.
- run_report str
- Run reports. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- scope str
- Scope. global - Global scope. adom - ADOM scope. Valid values: global,adom.
- script_access str
- Script access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- set_install_ strtargets 
- Edit installation targets. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- super_user_ strprofile 
- Enable/disable super user profile disable - Disable super user profile enable - Enable super user profile Valid values: disable,enable.
- system_admin_ strprofile_ id 
- an identifier for the resource with format {{profileid}}.
- system_setting str
- System setting. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- term_access str
- Terminal access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- triage_events str
- Triage events. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- trusthost1 str
- Admin user trusted host IP, default 0.0.0.0 0.0.0.0 for all.
- trusthost10 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost2 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost3 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost4 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost5 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost6 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost7 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost8 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost9 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- type str
- profile type. system - System admin. restricted - Restricted admin. Valid values: system,restricted.
- update_incidents str
- Create/update incidents. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- vpn_manager str
- VPN manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- web_filter str
- Web filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- write_passwd_ straccess 
- set all/specify-by-user/specify-by-profile write password access mode. all - All except super users. specify-by-user - Specify by user. specify-by-profile - Specify by profile. Valid values: all,specify-by-user,specify-by-profile.
- write_passwd_ Sequence[Systemprofiles Admin Profile Write Passwd Profile Args] 
- Write-Passwd-Profiles. The structure of write_passwd_profilesblock is documented below.
- write_passwd_ Sequence[Systemuser_ lists Admin Profile Write Passwd User List Args] 
- Write-Passwd-User-List. The structure of write_passwd_user_listblock is documented below.
- adomAdmin String
- Enable Adom Admin. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- adomLock String
- ADOM locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adomPolicy StringPackages 
- ADOM policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adomSwitch String
- Administrator domain. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- allowTo StringInstall 
- Enable/disable the restricted user to install objects to the devices. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- appFilter String
- App filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- assignment String
- Assignment permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- changePassword String
- Enable/disable the user to change self password. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- configRetrieve String
- Configuration retrieve. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- configRevert String
- Revert Configuration from Revision History none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- consistencyCheck String
- Consistency check. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- datamask String
- Enable/disable data masking. disable - Disable data masking. enable - Enable data masking. Valid values: disable,enable.
- datamaskCustom List<Property Map>Fields 
- Datamask-Custom-Fields. The structure of datamask_custom_fieldsblock is documented below.
- datamaskCustom StringPriority 
- Prioritize custom fields. disable - Disable custom field search priority. enable - Enable custom field search priority. Valid values: disable,enable.
- datamaskFields List<String>
- Data masking fields. user - User name. srcip - Source IP. srcname - Source name. srcmac - Source MAC. dstip - Destination IP. dstname - Dst name. email - Email. message - Message. domain - Domain. Valid values: user,srcip,srcname,srcmac,dstip,dstname,email,message,domain.
- datamaskKeys List<String>
- Data masking encryption key.
- datamaskUnmasked NumberTime 
- Time in days without data masking.
- deployManagement String
- Install to devices. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- description String
- Description.
- deviceAp String
- Manage AP. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceConfig String
- Manage device configurations. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceForticlient String
- Manage FortiClient. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceFortiextender String
- Manage FortiExtender. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceFortiswitch String
- Manage FortiSwitch. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceManager String
- Device manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceOp String
- Device add/delete/edit. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- devicePolicy StringPackage Lock 
- Device/Policy Package locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceProfile String
- Device profile permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceRevision StringDeletion 
- Delete device revision. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceWan StringLink Load Balance 
- Manage WAN link load balance. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- dynamicSort StringSubtable 
- true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- eventManagement String
- Event management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- extensionAccess String
- Manage extension access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fabricViewer String
- Fabric viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter String
- FortiGuard Center. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter StringAdvanced 
- FortiGuard Center Advanced. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter StringFmw Mgmt 
- FortiGuard Center Firmware Management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter StringLicensing 
- FortiGuard Center Licensing. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgtGui StringProxy 
- FortiGate GUI proxy. disable - No permission. enable - With permission. Valid values: disable,enable.
- globalPolicy StringPackages 
- Global policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- importPolicy StringPackages 
- Import Policy Package. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- intfMapping String
- Interface Mapping none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsBaseline StringCfg 
- Ips baseline sensor configration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsBaseline StringOvrd 
- Enable/disable override baseline ips sensor. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ipsFilter String
- IPS filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ipsLock String
- IPS locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsObjects String
- Ips objects configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipv6Trusthost1 String
- Admin user trusted host IPv6, default ::/0 for all.
- ipv6Trusthost10 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost2 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost3 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost4 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost5 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost6 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost7 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost8 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost9 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- logViewer String
- Log viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policyIps StringAttrs 
- Policy ips attributes configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policyObjects String
- Policy objects permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- profileid String
- Profile ID.
- readPasswd String
- View password in clear text. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- realtimeMonitor String
- Realtime monitor. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- reportViewer String
- Report viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- rpcPermit String
- Set none/read/read-write rpc-permission read-write - Read-write permission. none - No permission. read - Read-only permission. Valid values: read-write,none,read.
- runReport String
- Run reports. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- scope String
- Scope. global - Global scope. adom - ADOM scope. Valid values: global,adom.
- scriptAccess String
- Script access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- setInstall StringTargets 
- Edit installation targets. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- superUser StringProfile 
- Enable/disable super user profile disable - Disable super user profile enable - Enable super user profile Valid values: disable,enable.
- systemAdmin StringProfile Id 
- an identifier for the resource with format {{profileid}}.
- systemSetting String
- System setting. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- termAccess String
- Terminal access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- triageEvents String
- Triage events. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- trusthost1 String
- Admin user trusted host IP, default 0.0.0.0 0.0.0.0 for all.
- trusthost10 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost2 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost3 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost4 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost5 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost6 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost7 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost8 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost9 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- type String
- profile type. system - System admin. restricted - Restricted admin. Valid values: system,restricted.
- updateIncidents String
- Create/update incidents. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- vpnManager String
- VPN manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- webFilter String
- Web filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- writePasswd StringAccess 
- set all/specify-by-user/specify-by-profile write password access mode. all - All except super users. specify-by-user - Specify by user. specify-by-profile - Specify by profile. Valid values: all,specify-by-user,specify-by-profile.
- writePasswd List<Property Map>Profiles 
- Write-Passwd-Profiles. The structure of write_passwd_profilesblock is documented below.
- writePasswd List<Property Map>User Lists 
- Write-Passwd-User-List. The structure of write_passwd_user_listblock is documented below.
Outputs
All input properties are implicitly available as output properties. Additionally, the SystemAdminProfile resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing SystemAdminProfile Resource
Get an existing SystemAdminProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: SystemAdminProfileState, opts?: CustomResourceOptions): SystemAdminProfile@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        adom_admin: Optional[str] = None,
        adom_lock: Optional[str] = None,
        adom_policy_packages: Optional[str] = None,
        adom_switch: Optional[str] = None,
        allow_to_install: Optional[str] = None,
        app_filter: Optional[str] = None,
        assignment: Optional[str] = None,
        change_password: Optional[str] = None,
        config_retrieve: Optional[str] = None,
        config_revert: Optional[str] = None,
        consistency_check: Optional[str] = None,
        datamask: Optional[str] = None,
        datamask_custom_fields: Optional[Sequence[SystemAdminProfileDatamaskCustomFieldArgs]] = None,
        datamask_custom_priority: Optional[str] = None,
        datamask_fields: Optional[Sequence[str]] = None,
        datamask_keys: Optional[Sequence[str]] = None,
        datamask_unmasked_time: Optional[float] = None,
        deploy_management: Optional[str] = None,
        description: Optional[str] = None,
        device_ap: Optional[str] = None,
        device_config: Optional[str] = None,
        device_forticlient: Optional[str] = None,
        device_fortiextender: Optional[str] = None,
        device_fortiswitch: Optional[str] = None,
        device_manager: Optional[str] = None,
        device_op: Optional[str] = None,
        device_policy_package_lock: Optional[str] = None,
        device_profile: Optional[str] = None,
        device_revision_deletion: Optional[str] = None,
        device_wan_link_load_balance: Optional[str] = None,
        dynamic_sort_subtable: Optional[str] = None,
        event_management: Optional[str] = None,
        extension_access: Optional[str] = None,
        fabric_viewer: Optional[str] = None,
        fgd_center: Optional[str] = None,
        fgd_center_advanced: Optional[str] = None,
        fgd_center_fmw_mgmt: Optional[str] = None,
        fgd_center_licensing: Optional[str] = None,
        fgt_gui_proxy: Optional[str] = None,
        global_policy_packages: Optional[str] = None,
        import_policy_packages: Optional[str] = None,
        intf_mapping: Optional[str] = None,
        ips_baseline_cfg: Optional[str] = None,
        ips_baseline_ovrd: Optional[str] = None,
        ips_filter: Optional[str] = None,
        ips_lock: Optional[str] = None,
        ips_objects: Optional[str] = None,
        ipv6_trusthost1: Optional[str] = None,
        ipv6_trusthost10: Optional[str] = None,
        ipv6_trusthost2: Optional[str] = None,
        ipv6_trusthost3: Optional[str] = None,
        ipv6_trusthost4: Optional[str] = None,
        ipv6_trusthost5: Optional[str] = None,
        ipv6_trusthost6: Optional[str] = None,
        ipv6_trusthost7: Optional[str] = None,
        ipv6_trusthost8: Optional[str] = None,
        ipv6_trusthost9: Optional[str] = None,
        log_viewer: Optional[str] = None,
        policy_ips_attrs: Optional[str] = None,
        policy_objects: Optional[str] = None,
        profileid: Optional[str] = None,
        read_passwd: Optional[str] = None,
        realtime_monitor: Optional[str] = None,
        report_viewer: Optional[str] = None,
        rpc_permit: Optional[str] = None,
        run_report: Optional[str] = None,
        scope: Optional[str] = None,
        script_access: Optional[str] = None,
        set_install_targets: Optional[str] = None,
        super_user_profile: Optional[str] = None,
        system_admin_profile_id: Optional[str] = None,
        system_setting: Optional[str] = None,
        term_access: Optional[str] = None,
        triage_events: Optional[str] = None,
        trusthost1: Optional[str] = None,
        trusthost10: Optional[str] = None,
        trusthost2: Optional[str] = None,
        trusthost3: Optional[str] = None,
        trusthost4: Optional[str] = None,
        trusthost5: Optional[str] = None,
        trusthost6: Optional[str] = None,
        trusthost7: Optional[str] = None,
        trusthost8: Optional[str] = None,
        trusthost9: Optional[str] = None,
        type: Optional[str] = None,
        update_incidents: Optional[str] = None,
        vpn_manager: Optional[str] = None,
        web_filter: Optional[str] = None,
        write_passwd_access: Optional[str] = None,
        write_passwd_profiles: Optional[Sequence[SystemAdminProfileWritePasswdProfileArgs]] = None,
        write_passwd_user_lists: Optional[Sequence[SystemAdminProfileWritePasswdUserListArgs]] = None) -> SystemAdminProfilefunc GetSystemAdminProfile(ctx *Context, name string, id IDInput, state *SystemAdminProfileState, opts ...ResourceOption) (*SystemAdminProfile, error)public static SystemAdminProfile Get(string name, Input<string> id, SystemAdminProfileState? state, CustomResourceOptions? opts = null)public static SystemAdminProfile get(String name, Output<String> id, SystemAdminProfileState state, CustomResourceOptions options)resources:  _:    type: fortimanager:SystemAdminProfile    get:      id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- AdomAdmin string
- Enable Adom Admin. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- AdomLock string
- ADOM locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- AdomPolicy stringPackages 
- ADOM policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- AdomSwitch string
- Administrator domain. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- AllowTo stringInstall 
- Enable/disable the restricted user to install objects to the devices. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- AppFilter string
- App filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- Assignment string
- Assignment permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ChangePassword string
- Enable/disable the user to change self password. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ConfigRetrieve string
- Configuration retrieve. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ConfigRevert string
- Revert Configuration from Revision History none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ConsistencyCheck string
- Consistency check. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Datamask string
- Enable/disable data masking. disable - Disable data masking. enable - Enable data masking. Valid values: disable,enable.
- DatamaskCustom List<SystemFields Admin Profile Datamask Custom Field> 
- Datamask-Custom-Fields. The structure of datamask_custom_fieldsblock is documented below.
- DatamaskCustom stringPriority 
- Prioritize custom fields. disable - Disable custom field search priority. enable - Enable custom field search priority. Valid values: disable,enable.
- DatamaskFields List<string>
- Data masking fields. user - User name. srcip - Source IP. srcname - Source name. srcmac - Source MAC. dstip - Destination IP. dstname - Dst name. email - Email. message - Message. domain - Domain. Valid values: user,srcip,srcname,srcmac,dstip,dstname,email,message,domain.
- DatamaskKeys List<string>
- Data masking encryption key.
- DatamaskUnmasked doubleTime 
- Time in days without data masking.
- DeployManagement string
- Install to devices. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Description string
- Description.
- DeviceAp string
- Manage AP. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceConfig string
- Manage device configurations. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceForticlient string
- Manage FortiClient. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceFortiextender string
- Manage FortiExtender. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceFortiswitch string
- Manage FortiSwitch. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceManager string
- Device manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceOp string
- Device add/delete/edit. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DevicePolicy stringPackage Lock 
- Device/Policy Package locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceProfile string
- Device profile permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceRevision stringDeletion 
- Delete device revision. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceWan stringLink Load Balance 
- Manage WAN link load balance. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DynamicSort stringSubtable 
- true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- EventManagement string
- Event management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ExtensionAccess string
- Manage extension access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FabricViewer string
- Fabric viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter string
- FortiGuard Center. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter stringAdvanced 
- FortiGuard Center Advanced. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter stringFmw Mgmt 
- FortiGuard Center Firmware Management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter stringLicensing 
- FortiGuard Center Licensing. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgtGui stringProxy 
- FortiGate GUI proxy. disable - No permission. enable - With permission. Valid values: disable,enable.
- GlobalPolicy stringPackages 
- Global policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ImportPolicy stringPackages 
- Import Policy Package. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IntfMapping string
- Interface Mapping none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IpsBaseline stringCfg 
- Ips baseline sensor configration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IpsBaseline stringOvrd 
- Enable/disable override baseline ips sensor. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- IpsFilter string
- IPS filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- IpsLock string
- IPS locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IpsObjects string
- Ips objects configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Ipv6Trusthost1 string
- Admin user trusted host IPv6, default ::/0 for all.
- Ipv6Trusthost10 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost2 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost3 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost4 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost5 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost6 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost7 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost8 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost9 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- LogViewer string
- Log viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- PolicyIps stringAttrs 
- Policy ips attributes configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- PolicyObjects string
- Policy objects permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Profileid string
- Profile ID.
- ReadPasswd string
- View password in clear text. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- RealtimeMonitor string
- Realtime monitor. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ReportViewer string
- Report viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- RpcPermit string
- Set none/read/read-write rpc-permission read-write - Read-write permission. none - No permission. read - Read-only permission. Valid values: read-write,none,read.
- RunReport string
- Run reports. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Scope string
- Scope. global - Global scope. adom - ADOM scope. Valid values: global,adom.
- ScriptAccess string
- Script access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- SetInstall stringTargets 
- Edit installation targets. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- SuperUser stringProfile 
- Enable/disable super user profile disable - Disable super user profile enable - Enable super user profile Valid values: disable,enable.
- SystemAdmin stringProfile Id 
- an identifier for the resource with format {{profileid}}.
- SystemSetting string
- System setting. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- TermAccess string
- Terminal access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- TriageEvents string
- Triage events. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Trusthost1 string
- Admin user trusted host IP, default 0.0.0.0 0.0.0.0 for all.
- Trusthost10 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost2 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost3 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost4 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost5 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost6 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost7 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost8 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost9 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Type string
- profile type. system - System admin. restricted - Restricted admin. Valid values: system,restricted.
- UpdateIncidents string
- Create/update incidents. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- VpnManager string
- VPN manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- WebFilter string
- Web filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- WritePasswd stringAccess 
- set all/specify-by-user/specify-by-profile write password access mode. all - All except super users. specify-by-user - Specify by user. specify-by-profile - Specify by profile. Valid values: all,specify-by-user,specify-by-profile.
- WritePasswd List<SystemProfiles Admin Profile Write Passwd Profile> 
- Write-Passwd-Profiles. The structure of write_passwd_profilesblock is documented below.
- WritePasswd List<SystemUser Lists Admin Profile Write Passwd User List> 
- Write-Passwd-User-List. The structure of write_passwd_user_listblock is documented below.
- AdomAdmin string
- Enable Adom Admin. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- AdomLock string
- ADOM locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- AdomPolicy stringPackages 
- ADOM policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- AdomSwitch string
- Administrator domain. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- AllowTo stringInstall 
- Enable/disable the restricted user to install objects to the devices. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- AppFilter string
- App filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- Assignment string
- Assignment permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ChangePassword string
- Enable/disable the user to change self password. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ConfigRetrieve string
- Configuration retrieve. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ConfigRevert string
- Revert Configuration from Revision History none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ConsistencyCheck string
- Consistency check. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Datamask string
- Enable/disable data masking. disable - Disable data masking. enable - Enable data masking. Valid values: disable,enable.
- DatamaskCustom []SystemFields Admin Profile Datamask Custom Field Args 
- Datamask-Custom-Fields. The structure of datamask_custom_fieldsblock is documented below.
- DatamaskCustom stringPriority 
- Prioritize custom fields. disable - Disable custom field search priority. enable - Enable custom field search priority. Valid values: disable,enable.
- DatamaskFields []string
- Data masking fields. user - User name. srcip - Source IP. srcname - Source name. srcmac - Source MAC. dstip - Destination IP. dstname - Dst name. email - Email. message - Message. domain - Domain. Valid values: user,srcip,srcname,srcmac,dstip,dstname,email,message,domain.
- DatamaskKeys []string
- Data masking encryption key.
- DatamaskUnmasked float64Time 
- Time in days without data masking.
- DeployManagement string
- Install to devices. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Description string
- Description.
- DeviceAp string
- Manage AP. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceConfig string
- Manage device configurations. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceForticlient string
- Manage FortiClient. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceFortiextender string
- Manage FortiExtender. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceFortiswitch string
- Manage FortiSwitch. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceManager string
- Device manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceOp string
- Device add/delete/edit. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DevicePolicy stringPackage Lock 
- Device/Policy Package locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceProfile string
- Device profile permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceRevision stringDeletion 
- Delete device revision. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DeviceWan stringLink Load Balance 
- Manage WAN link load balance. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- DynamicSort stringSubtable 
- true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- EventManagement string
- Event management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ExtensionAccess string
- Manage extension access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FabricViewer string
- Fabric viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter string
- FortiGuard Center. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter stringAdvanced 
- FortiGuard Center Advanced. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter stringFmw Mgmt 
- FortiGuard Center Firmware Management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgdCenter stringLicensing 
- FortiGuard Center Licensing. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- FgtGui stringProxy 
- FortiGate GUI proxy. disable - No permission. enable - With permission. Valid values: disable,enable.
- GlobalPolicy stringPackages 
- Global policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ImportPolicy stringPackages 
- Import Policy Package. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IntfMapping string
- Interface Mapping none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IpsBaseline stringCfg 
- Ips baseline sensor configration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IpsBaseline stringOvrd 
- Enable/disable override baseline ips sensor. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- IpsFilter string
- IPS filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- IpsLock string
- IPS locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- IpsObjects string
- Ips objects configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Ipv6Trusthost1 string
- Admin user trusted host IPv6, default ::/0 for all.
- Ipv6Trusthost10 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost2 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost3 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost4 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost5 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost6 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost7 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost8 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- Ipv6Trusthost9 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- LogViewer string
- Log viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- PolicyIps stringAttrs 
- Policy ips attributes configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- PolicyObjects string
- Policy objects permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Profileid string
- Profile ID.
- ReadPasswd string
- View password in clear text. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- RealtimeMonitor string
- Realtime monitor. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ReportViewer string
- Report viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- RpcPermit string
- Set none/read/read-write rpc-permission read-write - Read-write permission. none - No permission. read - Read-only permission. Valid values: read-write,none,read.
- RunReport string
- Run reports. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Scope string
- Scope. global - Global scope. adom - ADOM scope. Valid values: global,adom.
- ScriptAccess string
- Script access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- SetInstall stringTargets 
- Edit installation targets. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- SuperUser stringProfile 
- Enable/disable super user profile disable - Disable super user profile enable - Enable super user profile Valid values: disable,enable.
- SystemAdmin stringProfile Id 
- an identifier for the resource with format {{profileid}}.
- SystemSetting string
- System setting. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- TermAccess string
- Terminal access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- TriageEvents string
- Triage events. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- Trusthost1 string
- Admin user trusted host IP, default 0.0.0.0 0.0.0.0 for all.
- Trusthost10 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost2 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost3 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost4 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost5 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost6 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost7 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost8 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Trusthost9 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- Type string
- profile type. system - System admin. restricted - Restricted admin. Valid values: system,restricted.
- UpdateIncidents string
- Create/update incidents. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- VpnManager string
- VPN manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- WebFilter string
- Web filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- WritePasswd stringAccess 
- set all/specify-by-user/specify-by-profile write password access mode. all - All except super users. specify-by-user - Specify by user. specify-by-profile - Specify by profile. Valid values: all,specify-by-user,specify-by-profile.
- WritePasswd []SystemProfiles Admin Profile Write Passwd Profile Args 
- Write-Passwd-Profiles. The structure of write_passwd_profilesblock is documented below.
- WritePasswd []SystemUser Lists Admin Profile Write Passwd User List Type Args 
- Write-Passwd-User-List. The structure of write_passwd_user_listblock is documented below.
- adomAdmin String
- Enable Adom Admin. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- adomLock String
- ADOM locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adomPolicy StringPackages 
- ADOM policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adomSwitch String
- Administrator domain. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- allowTo StringInstall 
- Enable/disable the restricted user to install objects to the devices. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- appFilter String
- App filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- assignment String
- Assignment permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- changePassword String
- Enable/disable the user to change self password. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- configRetrieve String
- Configuration retrieve. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- configRevert String
- Revert Configuration from Revision History none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- consistencyCheck String
- Consistency check. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- datamask String
- Enable/disable data masking. disable - Disable data masking. enable - Enable data masking. Valid values: disable,enable.
- datamaskCustom List<SystemFields Admin Profile Datamask Custom Field> 
- Datamask-Custom-Fields. The structure of datamask_custom_fieldsblock is documented below.
- datamaskCustom StringPriority 
- Prioritize custom fields. disable - Disable custom field search priority. enable - Enable custom field search priority. Valid values: disable,enable.
- datamaskFields List<String>
- Data masking fields. user - User name. srcip - Source IP. srcname - Source name. srcmac - Source MAC. dstip - Destination IP. dstname - Dst name. email - Email. message - Message. domain - Domain. Valid values: user,srcip,srcname,srcmac,dstip,dstname,email,message,domain.
- datamaskKeys List<String>
- Data masking encryption key.
- datamaskUnmasked DoubleTime 
- Time in days without data masking.
- deployManagement String
- Install to devices. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- description String
- Description.
- deviceAp String
- Manage AP. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceConfig String
- Manage device configurations. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceForticlient String
- Manage FortiClient. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceFortiextender String
- Manage FortiExtender. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceFortiswitch String
- Manage FortiSwitch. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceManager String
- Device manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceOp String
- Device add/delete/edit. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- devicePolicy StringPackage Lock 
- Device/Policy Package locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceProfile String
- Device profile permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceRevision StringDeletion 
- Delete device revision. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceWan StringLink Load Balance 
- Manage WAN link load balance. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- dynamicSort StringSubtable 
- true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- eventManagement String
- Event management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- extensionAccess String
- Manage extension access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fabricViewer String
- Fabric viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter String
- FortiGuard Center. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter StringAdvanced 
- FortiGuard Center Advanced. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter StringFmw Mgmt 
- FortiGuard Center Firmware Management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter StringLicensing 
- FortiGuard Center Licensing. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgtGui StringProxy 
- FortiGate GUI proxy. disable - No permission. enable - With permission. Valid values: disable,enable.
- globalPolicy StringPackages 
- Global policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- importPolicy StringPackages 
- Import Policy Package. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- intfMapping String
- Interface Mapping none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsBaseline StringCfg 
- Ips baseline sensor configration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsBaseline StringOvrd 
- Enable/disable override baseline ips sensor. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ipsFilter String
- IPS filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ipsLock String
- IPS locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsObjects String
- Ips objects configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipv6Trusthost1 String
- Admin user trusted host IPv6, default ::/0 for all.
- ipv6Trusthost10 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost2 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost3 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost4 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost5 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost6 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost7 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost8 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost9 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- logViewer String
- Log viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policyIps StringAttrs 
- Policy ips attributes configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policyObjects String
- Policy objects permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- profileid String
- Profile ID.
- readPasswd String
- View password in clear text. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- realtimeMonitor String
- Realtime monitor. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- reportViewer String
- Report viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- rpcPermit String
- Set none/read/read-write rpc-permission read-write - Read-write permission. none - No permission. read - Read-only permission. Valid values: read-write,none,read.
- runReport String
- Run reports. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- scope String
- Scope. global - Global scope. adom - ADOM scope. Valid values: global,adom.
- scriptAccess String
- Script access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- setInstall StringTargets 
- Edit installation targets. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- superUser StringProfile 
- Enable/disable super user profile disable - Disable super user profile enable - Enable super user profile Valid values: disable,enable.
- systemAdmin StringProfile Id 
- an identifier for the resource with format {{profileid}}.
- systemSetting String
- System setting. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- termAccess String
- Terminal access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- triageEvents String
- Triage events. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- trusthost1 String
- Admin user trusted host IP, default 0.0.0.0 0.0.0.0 for all.
- trusthost10 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost2 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost3 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost4 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost5 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost6 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost7 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost8 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost9 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- type String
- profile type. system - System admin. restricted - Restricted admin. Valid values: system,restricted.
- updateIncidents String
- Create/update incidents. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- vpnManager String
- VPN manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- webFilter String
- Web filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- writePasswd StringAccess 
- set all/specify-by-user/specify-by-profile write password access mode. all - All except super users. specify-by-user - Specify by user. specify-by-profile - Specify by profile. Valid values: all,specify-by-user,specify-by-profile.
- writePasswd List<SystemProfiles Admin Profile Write Passwd Profile> 
- Write-Passwd-Profiles. The structure of write_passwd_profilesblock is documented below.
- writePasswd List<SystemUser Lists Admin Profile Write Passwd User List> 
- Write-Passwd-User-List. The structure of write_passwd_user_listblock is documented below.
- adomAdmin string
- Enable Adom Admin. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- adomLock string
- ADOM locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adomPolicy stringPackages 
- ADOM policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adomSwitch string
- Administrator domain. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- allowTo stringInstall 
- Enable/disable the restricted user to install objects to the devices. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- appFilter string
- App filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- assignment string
- Assignment permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- changePassword string
- Enable/disable the user to change self password. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- configRetrieve string
- Configuration retrieve. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- configRevert string
- Revert Configuration from Revision History none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- consistencyCheck string
- Consistency check. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- datamask string
- Enable/disable data masking. disable - Disable data masking. enable - Enable data masking. Valid values: disable,enable.
- datamaskCustom SystemFields Admin Profile Datamask Custom Field[] 
- Datamask-Custom-Fields. The structure of datamask_custom_fieldsblock is documented below.
- datamaskCustom stringPriority 
- Prioritize custom fields. disable - Disable custom field search priority. enable - Enable custom field search priority. Valid values: disable,enable.
- datamaskFields string[]
- Data masking fields. user - User name. srcip - Source IP. srcname - Source name. srcmac - Source MAC. dstip - Destination IP. dstname - Dst name. email - Email. message - Message. domain - Domain. Valid values: user,srcip,srcname,srcmac,dstip,dstname,email,message,domain.
- datamaskKeys string[]
- Data masking encryption key.
- datamaskUnmasked numberTime 
- Time in days without data masking.
- deployManagement string
- Install to devices. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- description string
- Description.
- deviceAp string
- Manage AP. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceConfig string
- Manage device configurations. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceForticlient string
- Manage FortiClient. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceFortiextender string
- Manage FortiExtender. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceFortiswitch string
- Manage FortiSwitch. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceManager string
- Device manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceOp string
- Device add/delete/edit. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- devicePolicy stringPackage Lock 
- Device/Policy Package locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceProfile string
- Device profile permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceRevision stringDeletion 
- Delete device revision. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceWan stringLink Load Balance 
- Manage WAN link load balance. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- dynamicSort stringSubtable 
- true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- eventManagement string
- Event management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- extensionAccess string
- Manage extension access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fabricViewer string
- Fabric viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter string
- FortiGuard Center. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter stringAdvanced 
- FortiGuard Center Advanced. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter stringFmw Mgmt 
- FortiGuard Center Firmware Management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter stringLicensing 
- FortiGuard Center Licensing. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgtGui stringProxy 
- FortiGate GUI proxy. disable - No permission. enable - With permission. Valid values: disable,enable.
- globalPolicy stringPackages 
- Global policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- importPolicy stringPackages 
- Import Policy Package. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- intfMapping string
- Interface Mapping none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsBaseline stringCfg 
- Ips baseline sensor configration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsBaseline stringOvrd 
- Enable/disable override baseline ips sensor. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ipsFilter string
- IPS filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ipsLock string
- IPS locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsObjects string
- Ips objects configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipv6Trusthost1 string
- Admin user trusted host IPv6, default ::/0 for all.
- ipv6Trusthost10 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost2 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost3 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost4 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost5 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost6 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost7 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost8 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost9 string
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- logViewer string
- Log viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policyIps stringAttrs 
- Policy ips attributes configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policyObjects string
- Policy objects permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- profileid string
- Profile ID.
- readPasswd string
- View password in clear text. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- realtimeMonitor string
- Realtime monitor. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- reportViewer string
- Report viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- rpcPermit string
- Set none/read/read-write rpc-permission read-write - Read-write permission. none - No permission. read - Read-only permission. Valid values: read-write,none,read.
- runReport string
- Run reports. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- scope string
- Scope. global - Global scope. adom - ADOM scope. Valid values: global,adom.
- scriptAccess string
- Script access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- setInstall stringTargets 
- Edit installation targets. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- superUser stringProfile 
- Enable/disable super user profile disable - Disable super user profile enable - Enable super user profile Valid values: disable,enable.
- systemAdmin stringProfile Id 
- an identifier for the resource with format {{profileid}}.
- systemSetting string
- System setting. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- termAccess string
- Terminal access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- triageEvents string
- Triage events. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- trusthost1 string
- Admin user trusted host IP, default 0.0.0.0 0.0.0.0 for all.
- trusthost10 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost2 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost3 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost4 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost5 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost6 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost7 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost8 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost9 string
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- type string
- profile type. system - System admin. restricted - Restricted admin. Valid values: system,restricted.
- updateIncidents string
- Create/update incidents. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- vpnManager string
- VPN manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- webFilter string
- Web filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- writePasswd stringAccess 
- set all/specify-by-user/specify-by-profile write password access mode. all - All except super users. specify-by-user - Specify by user. specify-by-profile - Specify by profile. Valid values: all,specify-by-user,specify-by-profile.
- writePasswd SystemProfiles Admin Profile Write Passwd Profile[] 
- Write-Passwd-Profiles. The structure of write_passwd_profilesblock is documented below.
- writePasswd SystemUser Lists Admin Profile Write Passwd User List[] 
- Write-Passwd-User-List. The structure of write_passwd_user_listblock is documented below.
- adom_admin str
- Enable Adom Admin. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- adom_lock str
- ADOM locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adom_policy_ strpackages 
- ADOM policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adom_switch str
- Administrator domain. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- allow_to_ strinstall 
- Enable/disable the restricted user to install objects to the devices. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- app_filter str
- App filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- assignment str
- Assignment permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- change_password str
- Enable/disable the user to change self password. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- config_retrieve str
- Configuration retrieve. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- config_revert str
- Revert Configuration from Revision History none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- consistency_check str
- Consistency check. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- datamask str
- Enable/disable data masking. disable - Disable data masking. enable - Enable data masking. Valid values: disable,enable.
- datamask_custom_ Sequence[Systemfields Admin Profile Datamask Custom Field Args] 
- Datamask-Custom-Fields. The structure of datamask_custom_fieldsblock is documented below.
- datamask_custom_ strpriority 
- Prioritize custom fields. disable - Disable custom field search priority. enable - Enable custom field search priority. Valid values: disable,enable.
- datamask_fields Sequence[str]
- Data masking fields. user - User name. srcip - Source IP. srcname - Source name. srcmac - Source MAC. dstip - Destination IP. dstname - Dst name. email - Email. message - Message. domain - Domain. Valid values: user,srcip,srcname,srcmac,dstip,dstname,email,message,domain.
- datamask_keys Sequence[str]
- Data masking encryption key.
- datamask_unmasked_ floattime 
- Time in days without data masking.
- deploy_management str
- Install to devices. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- description str
- Description.
- device_ap str
- Manage AP. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_config str
- Manage device configurations. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_forticlient str
- Manage FortiClient. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_fortiextender str
- Manage FortiExtender. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_fortiswitch str
- Manage FortiSwitch. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_manager str
- Device manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_op str
- Device add/delete/edit. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_policy_ strpackage_ lock 
- Device/Policy Package locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_profile str
- Device profile permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_revision_ strdeletion 
- Delete device revision. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- device_wan_ strlink_ load_ balance 
- Manage WAN link load balance. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- dynamic_sort_ strsubtable 
- true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- event_management str
- Event management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- extension_access str
- Manage extension access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fabric_viewer str
- Fabric viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgd_center str
- FortiGuard Center. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgd_center_ stradvanced 
- FortiGuard Center Advanced. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgd_center_ strfmw_ mgmt 
- FortiGuard Center Firmware Management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgd_center_ strlicensing 
- FortiGuard Center Licensing. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgt_gui_ strproxy 
- FortiGate GUI proxy. disable - No permission. enable - With permission. Valid values: disable,enable.
- global_policy_ strpackages 
- Global policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- import_policy_ strpackages 
- Import Policy Package. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- intf_mapping str
- Interface Mapping none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ips_baseline_ strcfg 
- Ips baseline sensor configration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ips_baseline_ strovrd 
- Enable/disable override baseline ips sensor. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ips_filter str
- IPS filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ips_lock str
- IPS locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ips_objects str
- Ips objects configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipv6_trusthost1 str
- Admin user trusted host IPv6, default ::/0 for all.
- ipv6_trusthost10 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost2 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost3 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost4 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost5 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost6 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost7 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost8 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6_trusthost9 str
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- log_viewer str
- Log viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policy_ips_ strattrs 
- Policy ips attributes configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policy_objects str
- Policy objects permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- profileid str
- Profile ID.
- read_passwd str
- View password in clear text. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- realtime_monitor str
- Realtime monitor. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- report_viewer str
- Report viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- rpc_permit str
- Set none/read/read-write rpc-permission read-write - Read-write permission. none - No permission. read - Read-only permission. Valid values: read-write,none,read.
- run_report str
- Run reports. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- scope str
- Scope. global - Global scope. adom - ADOM scope. Valid values: global,adom.
- script_access str
- Script access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- set_install_ strtargets 
- Edit installation targets. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- super_user_ strprofile 
- Enable/disable super user profile disable - Disable super user profile enable - Enable super user profile Valid values: disable,enable.
- system_admin_ strprofile_ id 
- an identifier for the resource with format {{profileid}}.
- system_setting str
- System setting. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- term_access str
- Terminal access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- triage_events str
- Triage events. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- trusthost1 str
- Admin user trusted host IP, default 0.0.0.0 0.0.0.0 for all.
- trusthost10 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost2 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost3 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost4 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost5 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost6 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost7 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost8 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost9 str
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- type str
- profile type. system - System admin. restricted - Restricted admin. Valid values: system,restricted.
- update_incidents str
- Create/update incidents. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- vpn_manager str
- VPN manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- web_filter str
- Web filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- write_passwd_ straccess 
- set all/specify-by-user/specify-by-profile write password access mode. all - All except super users. specify-by-user - Specify by user. specify-by-profile - Specify by profile. Valid values: all,specify-by-user,specify-by-profile.
- write_passwd_ Sequence[Systemprofiles Admin Profile Write Passwd Profile Args] 
- Write-Passwd-Profiles. The structure of write_passwd_profilesblock is documented below.
- write_passwd_ Sequence[Systemuser_ lists Admin Profile Write Passwd User List Args] 
- Write-Passwd-User-List. The structure of write_passwd_user_listblock is documented below.
- adomAdmin String
- Enable Adom Admin. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- adomLock String
- ADOM locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adomPolicy StringPackages 
- ADOM policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- adomSwitch String
- Administrator domain. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- allowTo StringInstall 
- Enable/disable the restricted user to install objects to the devices. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- appFilter String
- App filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- assignment String
- Assignment permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- changePassword String
- Enable/disable the user to change self password. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- configRetrieve String
- Configuration retrieve. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- configRevert String
- Revert Configuration from Revision History none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- consistencyCheck String
- Consistency check. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- datamask String
- Enable/disable data masking. disable - Disable data masking. enable - Enable data masking. Valid values: disable,enable.
- datamaskCustom List<Property Map>Fields 
- Datamask-Custom-Fields. The structure of datamask_custom_fieldsblock is documented below.
- datamaskCustom StringPriority 
- Prioritize custom fields. disable - Disable custom field search priority. enable - Enable custom field search priority. Valid values: disable,enable.
- datamaskFields List<String>
- Data masking fields. user - User name. srcip - Source IP. srcname - Source name. srcmac - Source MAC. dstip - Destination IP. dstname - Dst name. email - Email. message - Message. domain - Domain. Valid values: user,srcip,srcname,srcmac,dstip,dstname,email,message,domain.
- datamaskKeys List<String>
- Data masking encryption key.
- datamaskUnmasked NumberTime 
- Time in days without data masking.
- deployManagement String
- Install to devices. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- description String
- Description.
- deviceAp String
- Manage AP. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceConfig String
- Manage device configurations. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceForticlient String
- Manage FortiClient. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceFortiextender String
- Manage FortiExtender. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceFortiswitch String
- Manage FortiSwitch. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceManager String
- Device manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceOp String
- Device add/delete/edit. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- devicePolicy StringPackage Lock 
- Device/Policy Package locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceProfile String
- Device profile permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceRevision StringDeletion 
- Delete device revision. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- deviceWan StringLink Load Balance 
- Manage WAN link load balance. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- dynamicSort StringSubtable 
- true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- eventManagement String
- Event management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- extensionAccess String
- Manage extension access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fabricViewer String
- Fabric viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter String
- FortiGuard Center. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter StringAdvanced 
- FortiGuard Center Advanced. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter StringFmw Mgmt 
- FortiGuard Center Firmware Management. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgdCenter StringLicensing 
- FortiGuard Center Licensing. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- fgtGui StringProxy 
- FortiGate GUI proxy. disable - No permission. enable - With permission. Valid values: disable,enable.
- globalPolicy StringPackages 
- Global policy packages. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- importPolicy StringPackages 
- Import Policy Package. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- intfMapping String
- Interface Mapping none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsBaseline StringCfg 
- Ips baseline sensor configration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsBaseline StringOvrd 
- Enable/disable override baseline ips sensor. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ipsFilter String
- IPS filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- ipsLock String
- IPS locking none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipsObjects String
- Ips objects configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- ipv6Trusthost1 String
- Admin user trusted host IPv6, default ::/0 for all.
- ipv6Trusthost10 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost2 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost3 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost4 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost5 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost6 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost7 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost8 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- ipv6Trusthost9 String
- Admin user trusted host IPv6, default ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 for none.
- logViewer String
- Log viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policyIps StringAttrs 
- Policy ips attributes configuration. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- policyObjects String
- Policy objects permission. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- profileid String
- Profile ID.
- readPasswd String
- View password in clear text. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- realtimeMonitor String
- Realtime monitor. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- reportViewer String
- Report viewer. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- rpcPermit String
- Set none/read/read-write rpc-permission read-write - Read-write permission. none - No permission. read - Read-only permission. Valid values: read-write,none,read.
- runReport String
- Run reports. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- scope String
- Scope. global - Global scope. adom - ADOM scope. Valid values: global,adom.
- scriptAccess String
- Script access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- setInstall StringTargets 
- Edit installation targets. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- superUser StringProfile 
- Enable/disable super user profile disable - Disable super user profile enable - Enable super user profile Valid values: disable,enable.
- systemAdmin StringProfile Id 
- an identifier for the resource with format {{profileid}}.
- systemSetting String
- System setting. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- termAccess String
- Terminal access. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- triageEvents String
- Triage events. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- trusthost1 String
- Admin user trusted host IP, default 0.0.0.0 0.0.0.0 for all.
- trusthost10 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost2 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost3 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost4 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost5 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost6 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost7 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost8 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- trusthost9 String
- Admin user trusted host IP, default 255.255.255.255 255.255.255.255 for none.
- type String
- profile type. system - System admin. restricted - Restricted admin. Valid values: system,restricted.
- updateIncidents String
- Create/update incidents. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- vpnManager String
- VPN manager. none - No permission. read - Read permission. read-write - Read-write permission. Valid values: none,read,read-write.
- webFilter String
- Web filter. disable - Disable setting. enable - Enable setting. Valid values: disable,enable.
- writePasswd StringAccess 
- set all/specify-by-user/specify-by-profile write password access mode. all - All except super users. specify-by-user - Specify by user. specify-by-profile - Specify by profile. Valid values: all,specify-by-user,specify-by-profile.
- writePasswd List<Property Map>Profiles 
- Write-Passwd-Profiles. The structure of write_passwd_profilesblock is documented below.
- writePasswd List<Property Map>User Lists 
- Write-Passwd-User-List. The structure of write_passwd_user_listblock is documented below.
Supporting Types
SystemAdminProfileDatamaskCustomField, SystemAdminProfileDatamaskCustomFieldArgs            
- FieldCategories List<string>
- Field categories. log - Log. fortiview - FortiView. alert - Event management. ueba - UEBA. all - All. Valid values: log,fortiview,alert,ueba,all.
- FieldName string
- Field name.
- FieldStatus string
- Field status. disable - Disable field. enable - Enable field. Valid values: disable,enable.
- FieldType string
- Field type. string - String. ip - IP. mac - MAC address. email - Email address. unknown - Unknown. Valid values: string,ip,mac,email,unknown.
- FieldCategories []string
- Field categories. log - Log. fortiview - FortiView. alert - Event management. ueba - UEBA. all - All. Valid values: log,fortiview,alert,ueba,all.
- FieldName string
- Field name.
- FieldStatus string
- Field status. disable - Disable field. enable - Enable field. Valid values: disable,enable.
- FieldType string
- Field type. string - String. ip - IP. mac - MAC address. email - Email address. unknown - Unknown. Valid values: string,ip,mac,email,unknown.
- fieldCategories List<String>
- Field categories. log - Log. fortiview - FortiView. alert - Event management. ueba - UEBA. all - All. Valid values: log,fortiview,alert,ueba,all.
- fieldName String
- Field name.
- fieldStatus String
- Field status. disable - Disable field. enable - Enable field. Valid values: disable,enable.
- fieldType String
- Field type. string - String. ip - IP. mac - MAC address. email - Email address. unknown - Unknown. Valid values: string,ip,mac,email,unknown.
- fieldCategories string[]
- Field categories. log - Log. fortiview - FortiView. alert - Event management. ueba - UEBA. all - All. Valid values: log,fortiview,alert,ueba,all.
- fieldName string
- Field name.
- fieldStatus string
- Field status. disable - Disable field. enable - Enable field. Valid values: disable,enable.
- fieldType string
- Field type. string - String. ip - IP. mac - MAC address. email - Email address. unknown - Unknown. Valid values: string,ip,mac,email,unknown.
- field_categories Sequence[str]
- Field categories. log - Log. fortiview - FortiView. alert - Event management. ueba - UEBA. all - All. Valid values: log,fortiview,alert,ueba,all.
- field_name str
- Field name.
- field_status str
- Field status. disable - Disable field. enable - Enable field. Valid values: disable,enable.
- field_type str
- Field type. string - String. ip - IP. mac - MAC address. email - Email address. unknown - Unknown. Valid values: string,ip,mac,email,unknown.
- fieldCategories List<String>
- Field categories. log - Log. fortiview - FortiView. alert - Event management. ueba - UEBA. all - All. Valid values: log,fortiview,alert,ueba,all.
- fieldName String
- Field name.
- fieldStatus String
- Field status. disable - Disable field. enable - Enable field. Valid values: disable,enable.
- fieldType String
- Field type. string - String. ip - IP. mac - MAC address. email - Email address. unknown - Unknown. Valid values: string,ip,mac,email,unknown.
SystemAdminProfileWritePasswdProfile, SystemAdminProfileWritePasswdProfileArgs            
- Profileid string
- Profile ID.
- Profileid string
- Profile ID.
- profileid String
- Profile ID.
- profileid string
- Profile ID.
- profileid str
- Profile ID.
- profileid String
- Profile ID.
SystemAdminProfileWritePasswdUserList, SystemAdminProfileWritePasswdUserListArgs              
- Userid string
- User ID.
- Userid string
- User ID.
- userid String
- User ID.
- userid string
- User ID.
- userid str
- User ID.
- userid String
- User ID.
Import
System AdminProfile can be imported using any of these accepted formats:
$ export “FORTIMANAGER_IMPORT_TABLE”=“true”
$ pulumi import fortimanager:index/systemAdminProfile:SystemAdminProfile labelname {{profileid}}
$ unset “FORTIMANAGER_IMPORT_TABLE”
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- fortimanager fortinetdev/terraform-provider-fortimanager
- License
- Notes
- This Pulumi package is based on the fortimanagerTerraform Provider.