FCP-FSA-AD-5-0: Fortinet NSE 5 - FortiSandbox 5.0 Administrator

Wildcard administrator accounts in PAN-OS rely on Vendor-Specific Attributes (VSAs) returned by an external authentication server to dynamically assign an admin role and access domain to any user matching a defined pattern. Only RADIUS and TACACS+ servers can return these VSAs during authentication, which is what enables wildcard account matching. Local and LDAP authentication require explicitly defined, individual administrator accounts and do not support the VSA-based dynamic role mapping needed for wildcard administrators.