Technical Tip: Interface Bandwidth widget visibility for read-only admin accounts

[Raghu_Kumar]

Description	This article describes why read-only admin accounts cannot view or add the Interface Bandwidth Widget for SD-WAN or physical interfaces on FortiGate, even if system read permissions are assigned.
Scope	FortiGate.
Solution	Read-Only admin accounts are unable to add an Interface Bandwidth Widget for any interfaces, and will show the following error: 'Bandwidth monitoring is disabled for this interface'. The Super Admin user will be able to add the widget successfully. This behavior is expected for Read-Only Admin Accounts because the Interface Bandwidth Widget derives its data from diagnostic commands, such as: diag netlink interface list diag hardware device nic <interface> Read-Only Admin Accounts do not have permissions to run these diagnostic commands. As a result, the system cannot fetch the required data for the widget, rendering it unavailable to read-only users. Solution: Enable permission-based usage of CLI commands as shown below: Once enabled, Read-Only Account Users will be able to view the bandwidth monitoring. Super Admin Account Users can enable and view the Interface Bandwidth Widget by ensuring the following configuration: Enable bandwidth monitoring on the required interface. For Example: config system interface     edit "dmz"         set monitor-bandwidth enable     next     edit "wan1"         set monitor-bandwidth enable     next end Once enabled from a Super Admin Account, it will be viewable using a Super Admin User Account or any account that has Read/Write permission for executing the commands in the CLI. Note: Use a Super Admin Account to add the Interface Bandwidth Widget in the GUI.