Administrator Fornetet is able to view logs and perform device management tasks such as adding and removing registered devices, but cannot create a mail server to send alert mails. The causes of this problem are:
fortinet is assigned a Restricted_User administrative rights profile.
Administrators who are assigned as Restricted_User have restricted access, which may include viewing logs and performing certain device management tasks, but not more advanced administrative functions such as configuring mail servers. Such permission restrictions prevent them from performing configuration changes that require higher permissions.

When a device is moved from one ADOM to another, analytics logs can be moved automatically, but you may need to rebuild the database for the logs to be fully transferred and usable in the new ADOM. Archived logs, however, do not move automatically between ADOMs.

When the RAID status is Degraded, it typically indicates that one or more drives in the RAID array have failed or are missing, causing the RAID array to operate with reduced redundancy. In this state, the array is still functioning, but it's at risk because the fault tolerance provided by RAID is compromised.

These logs are generated when devices that were previously offline come back online and send their log data to the FortiAnalyzer.

Configure trusted hosts.
Trusted hosts restrict administrative access to FortiAnalyzer by limiting the IP addresses or subnets from which administrators can log in.
Use administrator profiles.
Administrator profiles define roles and permissions, restricting what specific administrators can access and manage on FortiAnalyzer.
The other options are not applicable because:
Limiting access to specific virtual domains is not applicable to FortiAnalyzer, as virtual domains (VDOMs) are a concept used in FortiGate, not FortiAnalyzer.
Fabric connectors to external LDAP servers are used for authentication purposes but do not directly restrict administrative access based on roles or IP addresses.