To extend the GUI session inactivity timeout for a specific administrator profile, you must override the global idle timeout setting. This is configured within the administrator profile itself. The admintimeout parameter, configured under config system accprofile, sets the idle timeout in minutes for that specific profile. Increasing this value from its default (which uses the global setting) to a higher number will prevent the NOC team's sessions from disconnecting prematurely due to inactivity. The override must also be enabled for this value to take effect.

A. The order of administrator profiles in the configuration list has no bearing on how their individual settings are applied.

B. This option uses incorrect terminology ("offline value"). More importantly, simply increasing a value while the "Override Idle Timeout" feature is disabled (as shown in the exhibit) will have no effect.

C. Assigning the superadmin role affects permissions and access rights; it does not control the session idle timeout duration.

1. FortiOS 7.6.1 Administration Guide

Page 611

Section: "System > Admin Profiles".

The guide states: "Override Idle Timeout: Enable to override the global idle timeout for administrators using this profile. Enter the number of minutes that an administrator can be idle before they are logged out." This confirms the feature's existence and function in the GUI.

2. FortiOS 7.6.1 CLI Reference

Page 2511

Section: config system accprofile.

The reference details the relevant CLI parameters:

set admintimeout-override {enable | disable}: "Enable/disable overriding the global administrator idle timeout."

set admintimeout : "Administrator idle timeout in minutes (0 - 480

default = 0). A value of 0 means it uses the global timeout."

This directly supports that admintimeout is the correct parameter to modify for the profile-specific timeout duration.