Device Manager : Device Manager tab : Extend workspace to entire ADOM
 
Extend workspace to entire ADOM
When concurrent ADOM access is disabled, administrators are able to lock the ADOM. A right-click menu option has been added to allow you to lock/unlock ADOM access. The ADOM lock status is displayed by a lock icon to the left of the ADOM name. The lock status is as follows:
Grey lock: The ADOM is currently unlocked, and is read/write.
Green lock: The ADOM is locked by you when logged in as an admin.
Red lock: The ADOM is locked by another admin.
To enable and disable workspaces:
1. Select the System Settings tab on the navigation pane.
2. Go to System Settings > Dashboard.
3. In the CLI Console widget enter the following CLI command:
config system global
set workspace enable | disable
end
4. The FortiManager session will end and you must log back into the FortiManager system.
 
Workspace is disabled by default. When workspace is enabled, the Device Manager tab and Policy & Objects tab are read-only. You must lock the ADOM to enable read-write access to make changes to the ADOM.
An additional CLI command has been added to enable or disable ADOM lock override:
config system global
set lock-preempt [enable | disable]
When the ADOM lock override is enabled, if two administrators are concurrently accessing an ADOM and one attempts to lock the ADOM, the other admin can kick the admin off the ADOM, preventing the ADOM from being locked.