User's street address.

The number of hosts that can be associated with or registered to this user and connect to the network. There are two ways to reach this total.

If the host is scanned by an agent or if adapters have been manually associated with hosts, then a single host with up to five adapters counts as one host.

If the host is not scanned by an agent or if the adapters have not been associated with specific hosts, then each adapter is counted individually as a host. In this scenario one host with two network adapters would be counted as two hosts.

Numbers entered in this field override the default setting in System > Settings > Network Device. Blank indicates that the default is used. See Network device.

If an administrator exceeds the number of hosts when registering a host to a user, a warning message is displayed indicating that the number of Allowed Hosts has been incremented and the additional hosts are registered to the user.

User's city of residence.

Date the user record was created in the database. Options include Before, After, and Between.

Indicates whether hosts registered to this user should be deleted from the database when the user's record ages out of the database.

User's email address.

Controls the number of days a user is authorized on the network. Options include Before, After, Between, Never, and None. The user is deleted from the database when the date specified here has passed. The date is automatically calculated based on the information entered when Aging is configured. See Aging out host or user records.

Indicates whether hosts owned by this user should be deleted when the user ages out of the database. It is recommended that you set this to Yes.

Controls the number of days a User is authorized on the network. Options include Before, After, Between, Never, and None. User is deleted from the database when the date specified here has passed. The date is continuously recalculated based on the information entered in the Days Inactive field. See Aging out host or user records or Set user expiration date.

Number of days the user must remain continuously inactive on the network to be removed from the database. See Aging out host or user records or Set user expiration date.

Date of the last time the user logged into or out of the network or the FortiNAC Manager admin UI. This date is used to count the number of days of inactivity. Options include Before, After, Between, and Never.

User's last name.

User's mobile phone number. Can be used to send SMS messages based on alarms. Requires the Mobile Provider to send SMS messages.

Provider or carrier for user's mobile phone.

Notes about this user.

User's telephone number.

Role assigned to the user. Roles are attributes of users and are used as filters for user/host profiles. See Roles.

Value that typically comes from a field in the directory, but can be added manually. This value groups users and can be used to determine which role to apply to a user or which policy to use when scanning a user's computer. The data in this field could be a department name, a type of user, a graduation class, a location or anything that distinguishes a group of users.

The local FortiNAC server containing the user record. If there are multiple FortiNAC servers with the same record, that record will be associated with each server. Example: Servers A and B both contain user ASmith. If "ASmith" is searched, two records will return, one for each server.

User's state of residence.

Current or last known status is indicated by an icon. See Icons. Hover over the icon to display additional details about this User in a tool tip.

Access: Indicates whether user is enabled or disabled.

User's title, this could be a form of address or their title within the organization.

Type of user. Allows you to differentiate between network users and guest/contractor users.

Unique alphanumeric ID. If you are using a directory for authentication, this should match an entry in the directory. If it does not, FortiNAC Manager assumes that this user is authenticating locally and asks you for a password.

When using a directory for authentication, fields such as name, address, email, are updated from the directory based on the user ID when the database synchronizes with the directory. This is true regardless of how the user is created and whether the user is locally authenticated or authenticated through the directory. If the user ID matches a user ID in the directory, the FortiNAC Manager database is updated with the directory data.

User's zip code based on their state of residence.

User name of the last user to modify the user.

Enter a single piece of data to quickly display a list of users. Search options include: IP address, MAC address, host name, User Name, and user ID. Drop-down arrow on the right is used to create and use custom filters.

If you are doing a wild card search for a MAC address you must include colons as separators, such as 00:B6:5*. Without the separators the search option cannot distinguish that it is a MAC address.

When quick search is enabled, the word Search appears before the search field. When a custom filter is enabled, Edit appears before the search field.

Right click options

Opens the Properties window for the selected user. See User properties.

Add the selected user(s) to one or more group(s). See Add users to groups.

Deletes the selected user(s) from the database. See Delete a user.

Disables the selected user (s) preventing them from accessing the network regardless of the host they are using. Hosts registered to a disabled user will remain disabled regardless of the logged on user (if different).

Enables the selected user(s) if they were previously disabled. Restores network access.

Displays groups in which the selected user is a member.

If the User is also an administrator, separate options are displayed for administrator Groups and User Groups. Options are Group Membership (User) and Group Membership (Administrator).

Displays account details for the selected guest record, such as: user ID, account status, sponsor, account type, start and end dates, availability, role, authentication, security policy, account duration, reauthentication period, success URL, and the guest's password. See Guest account details.

Opens the Modify User window. See Add or modify a user.

Opens the Policy Details window and displays the policies that would apply to the selected user at this time, such as endpoint compliance policies, network access policies or Supplicant Policies. See Policy details.

Launches a tool to set the date and time for the user to age out of the database. See Set user expiration date.

Assigns a role to the selected user. See Roles.

Opens the admin auditing log showing all changes made to the selected item.

For information about the admin auditing log, see Audit Logs.

You must have permission to view the admin auditing log. See Add an administrator profile.

Displays all events for the selected user.

Collapses all records that have been expanded.

Expands selected user records to display host information.

Buttons

Import and Export options allow you to import users into the database from a CSV file or export a list of selected hosts to CSV, Excel, PDF, or RTF formats. See Import hosts, users or devices or Export data.