Admin profiles can be configured at both the global and ADOM scope. Profile configuration has become more granular. You can now specify whether or not an admin profile read-write, read-only, or no access for various global, ADOM, and other settings including policy packages and policy objects.

Global settings include: System Settings, Administrator Domain, Global Policy Packages, Global Objects, and Assignment.

ADOM settings include: Add/Delete Devices/Groups, Install to Devices, Retrieve Configuration from Devices, Terminal Access, Consistency Check, Device Manager, Manage Device Configuration, Policy Package, Policy Objects, and VPN Manager.

Other settings include: Log Viewer and Report Viewer.