Administrator VDOM permissions
Different types of administrator accounts have different permissions within VDOMs. For example, if your are using a super_admin profile account, you can perform all tasks. However, if you are using a regular admin account, the tasks available to you depend on whether you have read only or read/write permissions. The following table shows what tasks can performed by which administrators.
Table 95: Administrator VDOM permissions
Tasks | Regular administrator account | Super_admin profile administrator account |
Read only permission | Read/write permission |
View global settings | yes | yes | yes |
Configure global settings | no | no | yes |
Create or delete VDOMs | no | no | yes |
Configure multiple VDOMs | no | no | yes |
Assign interfaces to a VDOM | no | no | yes |
Revision Control Backup and Restore | no | no | yes |
Create VLANs | no | yes - for 1 VDOM | yes - for all VDOMs |
Assign an administrator to a VDOM | no | no | yes |
Create additional admin accounts | no | yes - for 1 VDOM | yes - for all VDOMs |
Create and edit protection profiles | no | yes - for 1 VDOM | yes - for all VDOMs |
The only difference in admin accounts when VDOMs are enabled is selecting which VDOM the admin account belongs to. Otherwise, by default the administration accounts are the same as when VDOMs are disabled and closely resemble the super_admin account in their privileges.
See also