Profile settings

Use Profile Settings to configure your profiles such as your account and configure authentication.

My profile

User Information
User Email	The email the user logs into the application with.
User Name	The user's first and last name.
User UUID	The user's unique ID.
User MFA	Indicates if Multifactor Authentication is disabled or enabled.
Tooltip	Disables the investigation tooltip in the Investigations page, the Investigations widget in the in the default dashboard, and global search results. For more information, see Investigate > .
Account Information
Account Name	The name of the account the user belongs to.
Account UUID	The account's unique ID. The Account UUID is useful when interacting with the APIs. Most APIs allow you to specify an account UUID to pull data for; this is equivalent to setting the Account Selector to a specific account. If you do not specify an account UUID, you receive data from all accounts you have access to.
Subscription Serial Number	The serial number for the account.

Authentication

Password	Click Change my password to update your FortiNDR Cloud password. Passwords must be a minimum of eight characters and are valid for 180 days. FortiNDR Cloud will notify you when your password is about to expire. If you attempt to log in after your password has expired, you will be prompted to create a new password.
Multi-Factor Authentication	Click Enable MFA to enter a token each time you log into FortiNDR Cloud. Multi-Factor Authentication requires a Time-based one-time password (TOTP) such as FortiToken. You will be required to configure an MFA token as soon as you long in.

API Tokens

API tokens are used to access FortiNDR Cloud cloud APIs. The token is only shown when it is created. With the exception of the token description, the actual token will not be visible in the portal. Older tokens may be revoked.

For integrations or scenarios where multiple users will rely on the token, a token tied to an API-only user is highly recommended. See, Creating users and assigning roles.

API Tokens

Click Create New Token to create permanent authentication tokens for authenticating API calls. These tokens never expire, and remain valid until revoked.

To create an API token:

1. Go to Profile Settings and scroll down to API Tokens.
2. Click Create new token. The Create New API Auth Token dialog opens.
3. In the Description field, enter a description of the token. The description will be visible in the API Tokens columns of the Users page and the User Details.
4. Click Create.

To revoke an API token:

1. Go to Profile Settings and scroll down to API Tokens.
2. In the last column of the table click, Revoke token. The Revoke API Token? dialog opens.

   

3. Click Confirm.