DescriptionIf a dynamic object is modified directly on a managed FortiGate, the next time the configuration is imported, "Per-Device Mapping" will be enabled. It will also be mapped to the device that made the change.
This occurs by design as the FortiManager is taking a preventative measure by tagging it as dynamic and assigning the FortiGate to it.
SolutionWhen a device is managed by FortiManager it is recommended not to make changes directly on the device, but rather apply the changes via FortiManager.
User should have read only privileges. If the user needs more flexibility they should have their own ADOM, as to not impact other devices.
