Only the primary account holder can create secondary account holders in FortiCloud. The secondary account holder can log in to the same instance. Be default, the secondary account holder is assigned the default administrator profile named Restricted_User. However, the primary account holder can modify the admin profile for the secondary user.
A secondary account allows the Fortinet support team to troubleshoot the FortiManager Cloud deployment.
With FortiManager Cloud 6.4.5 and later, you can use the Identity and Access Management (IAM) portal, and you can migrate secondary accounts to the IAM portal. In IAM portal, secondary accounts are called sub users. For information about migrating sub users, see the Identity & Access Management Guide.
- Go to FortiCloud (https://support.fortinet.com/), and use your FortiCloud account credentials to log in.
- From the top-right corner, click your login name, and select My Account.
- Click Manage User.
- Click the new user icon to add a new user.
- When creating an account for the Fortinet support team, specify an email for the secondary account, and select Full Access or Limit Access.
A user with full access has the same access level as a primary account user. A user with limited access can only manage the assigned product serial number and will be unable to receive renewal notices or create additional secondary account users.
- Log in to the personal FortiCare portal. Under FortiManager Cloud section, you will see an account listed as a secondary member.
- Click the entry to expand the view.
- Click Enter to access the system via HTTPS.
- (Optional) Click Download New Image to get the latest firmware version.
- Ask the new user to log in to FortiManager Cloud.
After the new user logs in to FortiManager Cloud, the user is displayed on the FortiManager Cloud instance, and the administrator can modify the account. See Modifying a secondary account.
A secondary account can access the portal thirty days after it expires.