This article describes how to lock a single object when the workspace is enabled.
Scope
FortiManager.
Solution
Basically, when workspace is enabled, the object will be locked if ADOM is locked. If it is desired to lock a single object, it is necessary to lock the policy package folder.
After locking the policy package folder, then it is possible to lock the single object.
If it does not lock the ADOM and the policy folder from the ADOM Database, an error pop-up to lock either ADOM or the policy package will appear.