Fortinet black logo

User Guide

Manage subtenants

24.1.0
Copy Link
Copy Doc ID af1daa65-c273-11ec-9fd1-fa163e15d75b:70709
Download PDF

Manage subtenants

This article describes the features and capabilities of a Master Tenant account. A Master Tenant account allows you to manage several aspects of your multi-tenant environment.

Use a single SSO configuration

With a Master Tenant account, you have the option to apply your SSO configuration to all of your subtenants. You can find the following option under the User Configuration module of your SSO integration.

Select the Use for all sub-accounts option to use a single SSO configuration for all of your subtenants. Settings configured on the Master Tenant account such as New User notification, Default Timezone, and Auto Create Users are also applied to all other tenants. Newly created users are automatically added to the correct subtenant.

Switch between subtenants

You can use the Customer Switcher to switch between your subtenants. To switch to different subtenants, perform the following steps:

  1. Click your account name then select Switch Customer.

  2. On the Select Customer modal, select the Customer and User that you would like to switch to then click Switch.

Add a user with access to all subtenants

You can add a user with specific access to all of your account's subtenants.

  1. Select Teams & Activity > Users, Groups & On-Call.

  2. Select + Add User.

  3. Enter the required information. The fields and options are described in Add users to your account.

  4. In the Sub-Account Access dropdown menu, Select FortiMonitor Sub-Accounts.

  5. Assign the user the appropriate ACL roles and scope.

  6. Select Next or Contact Information then fill out the form. The Contact Information pane allows you to add various contact methods for the user, which are then later used in Alert Timelines. However, only the email is required. You can also add labels (optional) to each contact information.

  7. Select Finish. The new user is added to your FortiMonitor account.

Add users to subtenants

You can add FortiMonitor users to any of your account's subtenants by inviting them and configuring their ACL roles and scope. The user's access and permissions to the subtenant account can be configured depending on your requirements.

To add a user to a subtenant, perform the following steps:

  1. Switch to the subtenant where you want to add the user.

  2. On the navigation bar of a subtenant account, select Teams & Activity > Users, Groups & On-Call.

  3. Click + Add > Invite Existing User.
    Note: if you do not see this option, you need to have the feature enabled - please contact our support team.

  4. On the subsequent Invite External User form, enter the email address the user utilizes to log in to FortiMonitor.

  5. Enable the Skip invitation email option to activate the invited user without waiting for the invited user to respond to the activation email.

  6. Assign the user the appropriate ACL roles and scope.
    You cannot edit the user's contact information - only they can edit it from within their primary account.

  7. Click Finish. The user will be sent a confirmation email allowing them to confirm they'd like to become a member of your account. Once they accept it, they will be able to perform the actions you granted in step 4.

Create a subtenant

To create a new subtenant, perform the following steps:

  1. Click your account name then select Switch Customer.

  2. On the Select Customer modal, click Add Customer.
    The Add Customer modal will be displayed.

  3. Enter the required information. The fields are described in the following table.

Field

Description

Name

The name of the subtenant.

Email Address

The email address to be associated with the subtenant.

Partner Key

The unique identifier from your internal systems. This can be used to reference the subtenant for API calls.

Package

The monitoring package to assign to the subtenant. The list of available packages is set by FortiMonitor.

4. Click Create Customer. The new subtenant will be created.

Manage subtenants

This article describes the features and capabilities of a Master Tenant account. A Master Tenant account allows you to manage several aspects of your multi-tenant environment.

Use a single SSO configuration

With a Master Tenant account, you have the option to apply your SSO configuration to all of your subtenants. You can find the following option under the User Configuration module of your SSO integration.

Select the Use for all sub-accounts option to use a single SSO configuration for all of your subtenants. Settings configured on the Master Tenant account such as New User notification, Default Timezone, and Auto Create Users are also applied to all other tenants. Newly created users are automatically added to the correct subtenant.

Switch between subtenants

You can use the Customer Switcher to switch between your subtenants. To switch to different subtenants, perform the following steps:

  1. Click your account name then select Switch Customer.

  2. On the Select Customer modal, select the Customer and User that you would like to switch to then click Switch.

Add a user with access to all subtenants

You can add a user with specific access to all of your account's subtenants.

  1. Select Teams & Activity > Users, Groups & On-Call.

  2. Select + Add User.

  3. Enter the required information. The fields and options are described in Add users to your account.

  4. In the Sub-Account Access dropdown menu, Select FortiMonitor Sub-Accounts.

  5. Assign the user the appropriate ACL roles and scope.

  6. Select Next or Contact Information then fill out the form. The Contact Information pane allows you to add various contact methods for the user, which are then later used in Alert Timelines. However, only the email is required. You can also add labels (optional) to each contact information.

  7. Select Finish. The new user is added to your FortiMonitor account.

Add users to subtenants

You can add FortiMonitor users to any of your account's subtenants by inviting them and configuring their ACL roles and scope. The user's access and permissions to the subtenant account can be configured depending on your requirements.

To add a user to a subtenant, perform the following steps:

  1. Switch to the subtenant where you want to add the user.

  2. On the navigation bar of a subtenant account, select Teams & Activity > Users, Groups & On-Call.

  3. Click + Add > Invite Existing User.
    Note: if you do not see this option, you need to have the feature enabled - please contact our support team.

  4. On the subsequent Invite External User form, enter the email address the user utilizes to log in to FortiMonitor.

  5. Enable the Skip invitation email option to activate the invited user without waiting for the invited user to respond to the activation email.

  6. Assign the user the appropriate ACL roles and scope.
    You cannot edit the user's contact information - only they can edit it from within their primary account.

  7. Click Finish. The user will be sent a confirmation email allowing them to confirm they'd like to become a member of your account. Once they accept it, they will be able to perform the actions you granted in step 4.

Create a subtenant

To create a new subtenant, perform the following steps:

  1. Click your account name then select Switch Customer.

  2. On the Select Customer modal, click Add Customer.
    The Add Customer modal will be displayed.

  3. Enter the required information. The fields are described in the following table.

Field

Description

Name

The name of the subtenant.

Email Address

The email address to be associated with the subtenant.

Partner Key

The unique identifier from your internal systems. This can be used to reference the subtenant for API calls.

Package

The monitoring package to assign to the subtenant. The list of available packages is set by FortiMonitor.

4. Click Create Customer. The new subtenant will be created.