When creating administrative users which of the following configuration objects determines access rights on the FortiGate unit.

An administrative profile explicitly defines the permissions and access rights of a user to specific areas of the FortiGate configuration and monitoring, controlling what they can view and modify.

`allowaccess` interface settings determine which management protocols (e.g., HTTPS, SSH) are allowed on a specific interface, not the granular access rights of an administrative user.

Operation mode (e.g., NAT/Route, Transparent) defines how the FortiGate functions within the network, but it does not directly control individual administrative user access rights.

A local-in policy is a firewall policy that controls traffic destined for the FortiGate itself, protecting management interfaces, but it does not define the internal access permissions of an authenticated administrator.