Configuring remote access override options
The following procedure is part of the LDAP profile configuration process. For general procedures about how to configure an LDAP profile, see
“Configuring LDAP profiles”.
When you add a FortiMail administrator (see
“Configuring administrator accounts”), you must specify an access profile (the access privileges) for the administrator. You must also specify a domain (either system or a protected domain) that the administrator is entitled to access.
If you are adding an LDAP account, you can override the access profile and domain setting with the values of the remote attributes returned from the LDAP server.
1. Go to Profile > LDAP.
2. Click New to create a new profile or double click on an existing profile to edit it.
3. Click the arrow to expand the Remote Access Override Options section.
4. Configure the following:
GUI item | Description |
Enable remote access override | Enable to override the access profile you specify when you add an administrator with the value of the remote attribute returned from the LDAP server, if the returned value matches an existing access profile. If there is no match, the specified access profile will still be used. Also specify the access profile attribute. |
Enable remote domain override | Enable to override the domain you specify when you add an administrator with the value of the remote attribute returned from the LDAP server, if the returned value matches an existing protected domain. If there is no match, the specified domain will still be used. Also specify the domain name attribute. |