Users

The USERS option specifies who is allowed to use the FortiEDR Central Manager console. During installation of the FortiEDR Central Manager, you must specify the user name and password of the first FortiEDR Central Manager console user. This is the only user who can log in to the FortiEDR Central Manager console for the first time.

To add a user:

1. Click the button.
2. Fill in the displayed window.

   

3. Define this user’s password. Make sure to remember it and notify the user about this password.
4. Select the user’s Role. The system comes with three predefined user roles:
   • Admin: Is the highest-level super user that can perform all operations in the FortiEDR Central Manager console for all organizations. This role can create users for any organization. For more details, see Multi-tenancy (Organizations).
   • Local Admin: Is a super user that can perform all operations in the FortiEDR Central Manager console only for its own organization. Typically, the Local Administrator sets up the users for its organization. This role can only create users for its own organization.
   • User: This user is allowed to view all information and to perform actions, such as to mark security events as handled, change policies and define Exceptions. This user is very similar to the Local Administrator. However, this user cannot access the ADMINISTRATION tab, which is described in this chapter.

   

   Note – When upgrading FortiEDR from a version prior to V3.0, all administrators in the previous FortiEDR version are automatically assigned Administrator and Local Administrator privileges. You can decide whether to leave each such administrator with both sets of privileges, or to only assign them the Local Administrator role.

5. Check the Require two-factor authentication for this user checkbox if you want to require two-factor authentication for the user. When checked, this user must be authenticated using two-factor authentication in order to log in. For more details about two-factor authentication in FortiEDR, see Two-Factor Authentication.
6. Click Save.