Using Asset Management to apply FortiSASE entitlements

The Asset Management portal supports FortiCloud Organizations. When Organizations are enabled and configured, the portal provides following features:

• Access to consolidated asset view across all the accounts, and ability to register and transfer assets between accounts within the Organization.

• The ability to switch to any customer account within the Organization to register and manage assets.

The IAM user's permission scope determines which accounts the user can access and their permission profile must include permissions for the Asset Management portal to use its features.

In our example, MSSP’s IAM users are assigned permission scopes based on the MSSP’s service tiers - Premium, Standard, and Basic. Thus, these IAM users can now individually apply FortiSASE entitlements for their corresponding customers.

To register FortiSASE license entitlements using IAM users:

1. Use IAM user tier3-analyst to login to Fortinet Support portal.

   

2. Enter the token code sent to the email ID registered for IAM user.

   

3. Click Go.

4. (Optional) For initial IAM user logins to any FortiCloud portal, a Fortinet Services Terms & Conditions page is displayed. Check the box and click Accept.

5. An aggregated list of OUs and OU member accounts is displayed as per IAM user’s assigned permission scope.

6. To apply license to the member account under sub-OU Region-Americas, hover over Company A account and click Select.

   

7. The Asset Management portal opens. A similar OU context switch is visible from the context switch dropdown, to switch to a different OU or OU member account.

   

8. Click Register Now.

9. Provide the Registration Code and End User Type.

   

10. Click Next.

11. Set the FORTINET PARTNER information.

    

12. Click Next.

13. Accept the terms then click Confirm.

    

14. Click Done.

15. To register additional FortiSASE license entitlement for member account under sub-OU Region-Asia, use the OU context dropdown to switch to tenant2@company-a.com member account.

    

16. Follow same steps from Step 7 to Step 13.

17. Similarly, to apply FortiSASE entitlements to other member accounts belonging to different sub-OUs, use IAM users (such as tier2-analyst, tier3-analyst) that have corresponding permission scope.

For more information, see Organizations in the Asset Management portal.