Fortinet white logo
Fortinet white logo

User Guide

Account management

Account management

Use the Account Management page to create new users and manage global settings for your account. You must have Admin privileges for one or more accounts to view the Account Management page.

To view the Account Management page:

Click the gear icon at the top-right of the page and select Account Management.

  • If you have access to only one account, you will see the Account Management page for your account

  • If you have Admin privileges for more than one account, you will see the Account Inventory page. From there, click an account to view it's Account Management page.

    You can filter page by Account Name, Created Date, Account Code, Number of Users, Number of Sensors and Last Login. You can also sort the Accounts page by Last Login to view which accounts are in use to help determine if they should be removed.

The top of the page will display descriptive parameters for the account, namely the account's UUID and sensor code, as well as the number of users and sensors provisioned in the account. A banner is displayed when your account is set to expire in less than 90 days.

The Account Management page contains the following tabs:

Users Create new users and assign roles.
Subnets

Lists all internal IP address ranges for the account. This list will always include the ranges defined in RFC 1918, link local addresses (169.254.0.0/16), and multicast addresses (224.0.0.0/4).

We recommend adding a public IP space owned by your organization, such as post-NAT, egress, or externally-accessible IP addresses, to this list. Doing so better characterizes the directionality of your network's traffic.

Contact your TSM with any public IP addresses or ranges that you would like to add to this list.

Admin users can add, edit or delete subnets in an account. See Add or edit subnets

Modules Displays the available integrations for FortiNDR Cloud.
Settings Enable SAML SSO, mulit-factor authentication, and generate PCAP encryption keys.

Billing

The billing summary provides three top-level views:

Bandwidth

Bandwidth data is shown for all customers.

Accounts are billed on the 95th percentile of aggregate bandwidth usage across all sensors, measured over 10-second intervals.

Data volume transferred is expressed in KB, MB, or bytes.

Log Ingestion

This tab is shown for all customers but only applies to customers with a log ingestion license.

Accounts are billed on the average EPS (Events Per Second).

Log processing rate is expressed in EPS.

Fortinet Automation Service

This tab is shown only when the Fortinet Automation Service is enabled.

It provides the account's License Details , including the serial number, description, API key status, and the number of concurrent users allowed.

The tab also displays the daily playbook limit, storage usage, and license expiry status, along with a warning about the upcoming expiration.

Additionally, it lists playbook metrics, such as concurrent execution limits, execution errors, the number of agents, playbooks created, playbook execution rate, and polling frequency.

Bandwidth and Log Ingestion tabs show your account’s usage for the current date compared to your available license. Both have three sections: Current month usage, Daily stats (configurable to any range up to 90 days), and Monthly History (configurable for any range).

For customers with multiple accounts, toggle between parent and child accounts using View <Account Name> alone or View <Account Name> and child.

Account management

Account management

Use the Account Management page to create new users and manage global settings for your account. You must have Admin privileges for one or more accounts to view the Account Management page.

To view the Account Management page:

Click the gear icon at the top-right of the page and select Account Management.

  • If you have access to only one account, you will see the Account Management page for your account

  • If you have Admin privileges for more than one account, you will see the Account Inventory page. From there, click an account to view it's Account Management page.

    You can filter page by Account Name, Created Date, Account Code, Number of Users, Number of Sensors and Last Login. You can also sort the Accounts page by Last Login to view which accounts are in use to help determine if they should be removed.

The top of the page will display descriptive parameters for the account, namely the account's UUID and sensor code, as well as the number of users and sensors provisioned in the account. A banner is displayed when your account is set to expire in less than 90 days.

The Account Management page contains the following tabs:

Users Create new users and assign roles.
Subnets

Lists all internal IP address ranges for the account. This list will always include the ranges defined in RFC 1918, link local addresses (169.254.0.0/16), and multicast addresses (224.0.0.0/4).

We recommend adding a public IP space owned by your organization, such as post-NAT, egress, or externally-accessible IP addresses, to this list. Doing so better characterizes the directionality of your network's traffic.

Contact your TSM with any public IP addresses or ranges that you would like to add to this list.

Admin users can add, edit or delete subnets in an account. See Add or edit subnets

Modules Displays the available integrations for FortiNDR Cloud.
Settings Enable SAML SSO, mulit-factor authentication, and generate PCAP encryption keys.

Billing

The billing summary provides three top-level views:

Bandwidth

Bandwidth data is shown for all customers.

Accounts are billed on the 95th percentile of aggregate bandwidth usage across all sensors, measured over 10-second intervals.

Data volume transferred is expressed in KB, MB, or bytes.

Log Ingestion

This tab is shown for all customers but only applies to customers with a log ingestion license.

Accounts are billed on the average EPS (Events Per Second).

Log processing rate is expressed in EPS.

Fortinet Automation Service

This tab is shown only when the Fortinet Automation Service is enabled.

It provides the account's License Details , including the serial number, description, API key status, and the number of concurrent users allowed.

The tab also displays the daily playbook limit, storage usage, and license expiry status, along with a warning about the upcoming expiration.

Additionally, it lists playbook metrics, such as concurrent execution limits, execution errors, the number of agents, playbooks created, playbook execution rate, and polling frequency.

Bandwidth and Log Ingestion tabs show your account’s usage for the current date compared to your available license. Both have three sections: Current month usage, Daily stats (configurable to any range up to 90 days), and Monthly History (configurable for any range).

For customers with multiple accounts, toggle between parent and child accounts using View <Account Name> alone or View <Account Name> and child.