Global policy packages and their assignments to Administrative Domains (ADOMs) are managed centrally from the Global ADOM (also called the Global Database). To remove a global policy assignment from a customer ADOM, a service provider administrator (with superadmin privileges) must perform the action from within the Global ADOM context. They would navigate to the ADOM management settings, edit the specific customer ADOM (MyADOM), and unassign the global policy package. This action removes the global header policy from all policy packages within MyADOM. A customer administrator confined to their own ADOM does not have the necessary permissions or access to the Global ADOM to perform this function.

A. This describes the result but is less precise than option D. The action of unassigning the policy from MyADOM must be initiated within the Global ADOM, which is the crucial administrative context.

B. A customer administrator is restricted to their assigned ADOM and lacks the permissions to manage global objects or their assignments, which are controlled at a higher administrative level.

C. Locking an ADOM is a feature to prevent conflicting changes by multiple administrators within that ADOM; it does not elevate a customer administrator's permissions to the global level.

1. FortiManager Administration Guide 7.4.0

"Global policy packages"

Page 538: "Global policy packages are created in the global database and assigned to ADOMs. The policies are then used as a header and/or footer policy to the policy packages in the assigned ADOMs." This establishes that management is a global-level task.

2. FortiManager Administration Guide 7.4.0

"Assigning a global policy package to an ADOM"

Page 138: The procedure requires the administrator to "Go to System Settings > All ADOMs". This view is only available to administrators with access to the Global ADOM (such as a superadmin)

confirming that the assignment/unassignment is managed from the global context. The administrator then selects the target ADOM to edit its properties

including the assigned global package.

3. FortiManager Administration Guide 7.4.0

"Administrators"

Page 108: This section details administrator profiles and permissions

clarifying the distinction between a superadmin with global access and a standard administrator who may be restricted to a specific ADOM. A customer administrator would typically have a restricted profile.