Read only account to get device configuration

Hello,
 
I'm not sure I understand the question well, but I don't think you can filter permissions that much. Take a look at the access profiles:
https://docs.fortinet.com/document/fortigate/6.2.2/cli-reference/2620/system-accprofile
 
and administration profiles:
https://docs.fortinet.com/document/fortigate/latest/administration-guide/294491/administrator-profiles
 
You can filter much of the information to the administrator of your choice, but not as much.
 

Hi,
 
if you only need the user to be unable to modify, a read only user is sufficient. If, in addition, you only want me to see certain parts of the configuration, you will need test with the profiles.
 
Br

thank you all