list_admin_users

What list_admin_users does on Fortimanager

AI agents call list_admin_users to retrieve information from Fortimanager without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_admin_users is rated Low

The tool appears to retrieve administrative user information from FortiManager without modifying or executing actions. While enumerating admin users could inform privilege escalation reconnaissance, the tool itself only reads data. Severity is low because listing users is informational only; the real risk depends on downstream misuse of that information.

From the tool's definition Tool name 'list_admin_users' indicates a query/enumeration operation that retrieves user information. No description provided, but the 'list_' prefix is characteristic of Read operations (search, list, get, fetch).

The rule that runs list_admin_users safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Fortimanager, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_admin_users, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_admin_users": {}
  }
}

Questions about list_admin_users