Migrating sub users
You can migrate a sub user account from FortiCloud and convert it to an IAM user. After a sub user is migrated, they are required to update their login credentials the next time they access a portal.
![]() |
Not all Cloud Portals support IAM users at this time. |
After migration is complete:
-
The sub user is automatically removed from your FortiCloud account. A sub user cannot be restored in FortiCloud.
- The user's data and settings in the cloud portals are migrated with the user.
To migrate a sub user:
- Go to Migrate Sub Users.
- Read and accept the terms of migration, and click Next.
- Select a User ID formatting option, and click Next.
Format
Description
Use email account name Maps the user's FortiCloud Email (Account ID) to the IAM User ID field. Use username as ID and filter with space Maps the user's FortiCloud Name to the IAM User ID field. - Select a user(s) from the list, and click Next.
The User Details page is displayed.
- Review the user's details, and click Next.
The User Group, Asset and Portal Permissions pane opens.
- (Optional) Add the user to an IAM user group. See IAM user groups.
- Click IAM User Group, and select a group from the dropdown. The Effect Asset Permissions and the Effective Portal Permissions are displayed.
- Click Next, proceed to Step 10.
- From the Asset Permissions dropdown, select an asset group.
- Configure the Portal Permissions.
- Click the Edit button in the portal row.
Permission Description Allow Portal Access Toggle Yes to allow access to a portal.
Access Type The Access Type is defined by the portal. For example, the access types for Asset Management are:
Admin
Read Only
Read/Write
Whereas the access types for FortiOS SSO are:
SuperAdmin
Read Only
Additional Permission Additional permissions vary depending on the portal.
Asset Management:
Recieve Renewal Notification
FortiCare (Read Only or Read/Write)
Customer Serivce
Technical Assistance
RMA/DOA
Some portals have user roles that are specific to that portal. When a portal has a unique user role, the Custom option is displayed. For information about the role, see the product's documentation.
- Click Confirm.
- Click the Edit button in the portal row.
- Configure the Cloud Management & Services permissions.
- Click the plus sign (+), select a service from the list, and click ADD.
- Click the Edit button, and configure the portal permissions.
Permission Description Allow Portal Access Toggle Yes to grant access to the service. AccessType The Access Type is defined by the portal. For example, the access types for Asset Management are:
Admin
Read Only
Read/Write
Whereas the access types for FortiOS SSO are:
SuperAdmin
Read Only
- Click Confirm.
- Click Next. The Confirmation of Sub User/s to migrate page is displayed.
- Click Confirm. The Confirmation page is displayed.
- Click Download IAM user Credentials and send them to the user.