Chapter 1 What’s New for FortiOS 5.2.1 : System Features : Packet Capture Options for Admin Profiles
  
Packet Capture Options for Admin Profiles
Packet capture can now be configured in an admin profile and set to None, Read Only, or Read-Write. The packet capture option can be found by going to System > Admin > Admin Profiles and expanding Firewall Configuration.
This feature can also be configured in the CLI.
Syntax
config system accprofile
edit <name>
set fwgrp custom
config fwgrp-permission
set packet-capture {read-only | read-write | none}
end
end
end
end