In FortiOS, an administrator's access rights and permissions are defined by their assigned Administrator Profile. To access and modify global settings, which affect the entire FortiGate device, an administrator account must be associated with a profile that has global access permissions. The default superadmin profile provides this level of access. If an administrator cannot see the global settings, their current profile is likely restricted to a specific Virtual Domain (VDOM). Therefore, changing the account's assigned profile to one with global permissions (like superadmin) is the necessary action.

A. This feature restricts login access to specific IP addresses for security but does not grant permissions to view or edit global settings. B. Changing the password only alters the authentication credential; it does not modify the account's authorization level or configuration permissions. C. This enhances login security by requiring a second factor for authentication but does not change the permissions assigned to the administrator profile.

1. FortiOS 7.4.0 Administration Guide, System > Administrators > Admin profiles, Page 481: "Admin profiles are used to grant administrators permissions to access and configure the FortiGate... The default superadmin profile has full permission to the FortiGate, including all VDOMs and global settings. The default profadmin profile has full permission to the VDOMs it is assigned to, but no access to global settings." This directly confirms that the profile dictates access to global settings.

2. FortiOS 7.4.0 Administration Guide, System > Administrators > Administrators, Page 478: "When creating a new administrator, you must assign them an admin profile... The profile determines what the administrator can see and do in the GUI and CLI after they log in." This reinforces that all permissions are tied to the profile.