Fortinet FCP_FCT_AD-7.4 Exam - Topic 4 Question 2 Discussion

According to the FortiClient EMS Administration Guide (specifically the sections on Multitenancy), when multitenancy is enabled, the system introduces specific administrator roles to manage the separation between global settings and individual sites.

1. The Settings Administrator Role (Answer B)

Specific Scope: The Settings administrator is a specialized role designed to have access to the global site only.

Permissions: This role can access all configuration options on the global site, with the notable exception of administrator configuration (they cannot create or manage other admin accounts).

Use Case: This is typically used for auditors or system managers who need to oversee global-level configurations without needing access to specific endpoint data within individual sites or the power to modify administrative users.

2. Comparison with Other Multitenancy Roles

Super administrator: This role has unlimited access to the global site and all other sites within the EMS instance.

Site administrator: This role is restricted to specified sites only and has no access to the global site.

Standard administrator (Answer C): This is a generic role level within a site or a single-tenant environment but is not the role that defines 'global-only' access in a multitenant setup.

Tenant administrator / Global administrator: While these terms are common in general IT, FortiClient EMS documentation specifically uses the titles Super, Settings, and Site administrators for multitenancy management.

3. Curriculum Reference

FortiClient EMS 7.2/7.4 Study Guide (Multitenancy Chapter): Explicitly lists 'Settings administrator' as the role providing access to the global site only.

Admin Roles Table: The documentation provides a comparison table where the Settings Administrator's scope is strictly defined as 'Global site only'.