Global and vdom profiles
By default, when you add a new administrative profile, it is set to have a vdom scope. That is, only the super_admin has a global profile that enables configuration of the entire FortiGate unit.
There may be instances where additional global administrative profiles may be required. To add more global profiles, use the following CLI command to set or change an administrative profile to be global.
config system accprofile
set scope global
...
end
Once the scope is set, you can enable the read and read/write settings.
See Also