A FortiGate administrator with the super_admin profile configures a virtual domain (VDOM) for a new customer. After creating the VDOM, the administrator is unable to reassign the dmz interface to…

The administrator has the `super_admin` profile, which typically grants full permissions, including the ability to manage interfaces and VDOMs, assuming no global restrictions are in place.

A physical interface cannot be moved or reassigned to another VDOM if it is still referenced in the configuration of its current VDOM, such as being part of a firewall policy, static route, or DHCP server.

This statement is incorrect; non-management VDOMs commonly reference and use physical interfaces to provide network connectivity.

While an interface being in PPPoE or DHCP mode can affect certain configuration options, it does not inherently prevent reassignment if all existing configuration references are removed.