Course contents

Module 7: Workspace and WorkflowLesson 7.1 (1 of 1 in this module)10 of 17 in the FortiManager Administration course

Workspace mode and workflow sessions

ADOM locking, workspace mode, workflow approval sessions and how changes are submitted and approved.

Advanced · 20 min read

Written for FortiManager 7.6 · FortiManager 7.4: not yet reviewed

Exam domain: NSE 6 FortiManager (7.6) · Administration

Before this: Administrative domains (ADOMs)

You'll learn to explain how workspace mode prevents conflicting edits, describe a workflow session, and choose a mode for a team.

Technical definition

Workspace mode controls how administrators edit an ADOM. With it off, several people can edit at once. In normal workspace mode an ADOM or package is locked while someone edits. In workflow mode, changes also go through a submit and approve session.

Two administrators, one package

Maya and Luis both open the HQ package on Monday morning. Each adds a rule and saves. Whoever saves last may replace the other's work without a warning. Workspace mode exists to prevent that.

Three modes

The three workspace modes
The three workspace modesWith workspace disabled there are no locks and several administrators can edit at once. In normal mode an administrator locks the ADOM or a package, edits, saves and unlocks. In workflow mode the same applies, and a session must also be submitted for approval before it is committed.DisabledNo locksSeveral people can edit at onceUse whenOne admin or a labNormalLock, edit, save, unlockOnly the lock holder editsUse whenSmall teams avoiding collisionsWorkflowNormal, plus approvalSubmit a session for reviewUse whenChange control and audit

On small screens, swipe sideways or focus the diagram and use the arrow keys.

More control means more steps. Changing the mode affects every administrator, so announce it first.
Three modes
Three modesMode; How editing works; Use when. Disabled (default): No locks. Several people can edit at once. One administrator, or a lab Normal: Lock the ADOM or a package, edit, save, unlock. Small teams that need to avoid collisions Workflow: As normal, then submit a session for approval before it is committed. Change control and auditModeHow editing worksUse whenDisabled (default)No locks. Several people can edit atonce.One administrator, or a labNormalLock the ADOM or a package, edit,save, unlock.Small teams that need to avoidcollisionsWorkflowAs normal, then submit a session forapproval before it is committed.Change control and audit

On small screens, swipe sideways or focus the diagram and use the arrow keys.

Read each row across: the left box names the item, the others describe it.
config system global set workspace-mode normal end

FMG1. Use workflow instead of normal to add approvals. Changing the mode affects every administrator, so announce it first.

A workflow session

Workflow mode: a change is approved before it is committed
Workflow mode: a change is approved before it is committedAn administrator locks the ADOM, edits, and submits a session. An approver reviews and approves, and the change is applied to the ADOM database ready to install.Lock ADOMor lock thepackageEditMake changesSubmitCreate asessionApproveReviewerdecidesInstallPush todevicesReject returns the session to the editor with comments

On small screens, swipe sideways or focus the diagram and use the arrow keys.

Workflow gives you an audit trail and a second pair of eyes. It adds delay, so use it where change control matters.
  1. The editor locks the ADOM (or package) and makes the change.
  2. The editor submits a session with a comment describing it.
  3. An approver reviews the changes and approves or rejects the session.
  4. An approved session is committed to the ADOM, and the change is ready to install.

Locks left behind

An administrator who forgets to unlock holds everyone else out. Know who can break a lock, and agree how to use it, before locks become part of the daily routine.

Check your understanding

Predict · scenario 1

Two administrators saved changes to the same package and one change vanished. Which setting would have helped?

Predict · scenario 2

What does workflow mode add to normal workspace mode?

Predict · scenario 3

Which is the default workspace mode?

Further reading in Fortinet's documentation

Links open the named page in Fortinet's documentation (checked 19 October 2026). RouteLearn is an independent educational resource, not affiliated with or endorsed by Fortinet. Fortinet, FortiGate, FortiOS, FortiManager and FortiGuard are trademarks of Fortinet, Inc. Example output on this page is illustrative.

FAQ

Is workspace mode on by default?
No. By default several administrators can edit the same ADOM at once, and the later save can overwrite the earlier one. Enable it where more than one person changes configuration.
Does workflow slow people down?
Yes, deliberately. A reviewer must approve each session before it is committed. Use it where change control or audit matters, and normal mode where speed matters more.
Where is the mode set?
It is a FortiManager-wide setting, available in the GUI under System Settings and in the CLI under config system global.