fortios_system_accprofile

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Collection: fortinet.fortios

Full Name: fortinet.fortios.fortios_system_accprofile

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Parameters

Name	Type	Required	Default
access_token	str
enable_log	bool		`false`
member_path	str
member_state	str
state	str	yes
system_accprofile	dict
vdom	str		`root`

Example

yaml

# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_system_accprofile:
    access_token: '{{ fortios_access_token }}'
    state: present
    system_accprofile:
        admintimeout: "10"
        admintimeout_override: enable
        authgrp: none
        cli_config: enable
        cli_diagnose: enable
        cli_exec: enable
        cli_get: enable
        cli_show: enable
        ftviewgrp: none
        fwgrp: none
        fwgrp_permission:
            address: none
            others: none
            policy: none
            schedule: none
            service: none
        loggrp: none
        loggrp_permission:
            config: none
            data_access: none
            report_access: none
            threat_weight: none
        name: default_name_26
        netgrp: none
        netgrp_permission:
            cfg: none
            packet_capture: none
            route_cfg: none
        scope: vdom
        secfabgrp: none
        secfabgrp_permission:
            csffoo: none
            csfsys: none
            mmsgtp: none
        sysgrp: none
        sysgrp_permission:
            admin: none
            cfg: none
            mnt: none
            upd: none
        system_diagnostics: enable
        system_execute_ssh: enable
        system_execute_telnet: enable
        utmgrp: none
        utmgrp_permission:
            antivirus: none
            application_control: none
            casb: none
            data_leak_prevention: none
            data_loss_prevention: none
            dlp: none
            dnsfilter: none
            emailfilter: none
            endpoint_control: none
            file_filter: none
            icap: none
            ips: none
            mmsgtp: none
            spamfilter: none
            telemetry: none
            videofilter: none
            virtual_patch: none
            voip: none
            waf: none
            webfilter: none
        vpngrp: none
        wanoptgrp: none
        wifi: none
    vdom: root
  name: Configure access profiles for system administrators.