Fortinet black logo

Online Help

Add Reader roles to multiple subscriptions simultaneously (optional)

Copy Link
Copy Doc ID 6214e17c-9e13-11eb-b70b-00505692583a:985460

Add Reader roles to multiple subscriptions simultaneously (optional)

To add multiple subscriptions to FortiCASB with one user account simultaneously, follow these steps to configure the subscriptions with read access. If the user account has Global Administrator role, only do step 6-9.

  1. Log in to Azure portal as the master account user.
  2. In the search field, search and click on "users".
  3. Click on the user that will be used when adding the Subscriptions to FortiCASB.
  4. In the middle Profile navigation menu, click on Assigned roles.
  5. Click +Add assignments to add Global reader role and Global Administrator role to the user. (Global Administrator role will be removed later)
  6. Log out of the master account user, and log back in as the user whom the new roles are assigned to.
  7. Search and click on "Azure Active Directory".
  8. In the middle Azure Active Directory navigation menu, click on Properties.
  9. Click Yes under Access management for Azure resources, and click Save. This step allows the user to manage access of all Subscriptions under the Azure account.
  10. Log out of the user account, and log back in as the master account.
  11. Follow the steps 2-4 above, and remove the Global administrator role.

Now all the Subscriptions under the user account have Reader role, and you can add multiple Azure Subscriptions at the same time.

Add Reader roles to multiple subscriptions simultaneously (optional)

To add multiple subscriptions to FortiCASB with one user account simultaneously, follow these steps to configure the subscriptions with read access. If the user account has Global Administrator role, only do step 6-9.

  1. Log in to Azure portal as the master account user.
  2. In the search field, search and click on "users".
  3. Click on the user that will be used when adding the Subscriptions to FortiCASB.
  4. In the middle Profile navigation menu, click on Assigned roles.
  5. Click +Add assignments to add Global reader role and Global Administrator role to the user. (Global Administrator role will be removed later)
  6. Log out of the master account user, and log back in as the user whom the new roles are assigned to.
  7. Search and click on "Azure Active Directory".
  8. In the middle Azure Active Directory navigation menu, click on Properties.
  9. Click Yes under Access management for Azure resources, and click Save. This step allows the user to manage access of all Subscriptions under the Azure account.
  10. Log out of the user account, and log back in as the master account.
  11. Follow the steps 2-4 above, and remove the Global administrator role.

Now all the Subscriptions under the user account have Reader role, and you can add multiple Azure Subscriptions at the same time.