Customer creation and role-based access

FortiPortal provides role-based access with very granular controls. The MSP admin can create different profiles and downstream access to end-customers.

After a customer tenant is created, the MSP admin needs to provide information about what FortiManager ADOM(s) and FortiGate devices the customer can access.

The MSP admin can also select what configuration options to expose to the end-customer.

Looking at Policy and Object Edit Permission and Widget Permission in the following image shows how easy it is to customize the different configuration options exposed to the customer tenant. In this example, all monitors have been selected, with the ADOM named DEMO being added.

Now that the AcmeCorp customer has been created, we must assign devices within the ADOM named DEMO on FortiManager to AcmeCorp. It is essential to highlight that a customer can have several assigned ADOMs. If the customer admin needs to have access to multiple ADOMs, these ADOMs must be selected to provide complete visibility and access control. The following image shows how to choose available devices for a specific customer.