When creating FortiGate administrative users, which configuration objects specify the account rights?

Remote access profiles are typically used for VPN users and define authentication and authorization for remote access, not the rights of administrative users.

User groups are used to categorize end-users for firewall policies, authentication, and VPN access, not to define administrative access rights.

Administrator profiles allow for granular control over what an administrator can view, configure, and execute on the FortiGate, dictating their access rights to different parts of the configuration and monitoring features. Each administrative user is assigned one of these profiles to define their privileges.

Local-in policies control traffic destined for the FortiGate itself (like management access), but they do not define the specific administrative rights of a user once authenticated.