Editing User Information
Complete these steps to edit a CMDB user:
- Navigate to CMDB > Users.
- Select a User, and click Edit.
- Click on the General tab.
- Change the user profile information in the User Name, Full Name, Job Title and Company fields, if needed.
- Click the Importance drop-down list to select the importance of this user - "Normal", "Important", "Critical", or "Mission Critical".
- Enable Active if this is an active user.
- Update the user's Domain.
- Update the user's Distinguished Name DN.
- Update the Employee ID of the user.
- Select the Manager to which this user belongs.
- Click Alias to update any alias information for the user.
- In the Alias field, provide the alias user name.
- From the Identity Provider field, enter/select from AWS IAM, DUO, or Microsoft AD.
- In the Description field, enter any additional information about the alias.
- If another Alias is needed, in the Row column, click + to add another row for another alias, and repeat steps i-iii.
- Click Save when done.
- Click the Team Lead checkbox to define a user as a Team Lead for Case Management.
Note: This option is only available for users created under FortiSIEM Analysts Group. - Update any Description about the user.
- Click on the Contact tab.
- Update user contact information to the appropriate contact information fields - Work Phone, Mobile Phone, Home Phone, SMS, SMS Provider, ZIP, Email, Address, City, State, and Country field.
- If your company uses S/MIME for email, make sure the Email field is filled out, and upload the S/MIME certificate in the Certificate field by clicking Upload, and selecting your certificate.
- Click Save when done.
- Click on the FortiSIEM Attributes tab.
- For User Unlock, select Unlock by Administrator or Delay next login for ## minutes. If Delay next login for ## minutes is selected, enter the number of minutes the user will be unable to log into the system after five successive authentication failures.
- For Idle Timeout, enter the number of minutes after which an inactive user will be logged out.
- For Password Reset, enter the number of days after which a user’s current password for logging in to the system will automatically expire. If left blank, the user's password will never expire.
- For FortiSIEM Role, enable by selecting the FortiSIEM Role checkbox.
- For Mode, select Local or External.
If you select Local, enter and then reconfirm the user password. For External, see Authentication Settings for more information about using external authentication.
Notes:- If more than one authentication profile is associated with a user, then the servers will be contacted one-by-one until a connection to one of them is successful. Once a server has been contacted, if the authentication fails, the process ends, and the user is notified that the authentication failed.
- For local users, passwords must contain between 8 and 64 characters, and must include 1 letter, 1 numeric character and 1 special character.
- Select a Default Role for the user.
See the topic Role Settings for a list of default roles and permission. You can also create new roles, which will be available in this menu after you create them.
If this FortiSIEM Role user should be allowed to approve de-anonymization requests, ensure the Deobfuscation Approver role has been configured in Role Settings and that this configured role is selected here.
If the FortiSIEM Role user should be allowed to approve remediation requests, ensure the Remediation Approver role has been configured in Role Settings and that this configured role is selected here.For Case Management, FortiSIEM recommends choosing Full Admin to get the permissions needed to handle any case. - Click Save when done.
- For Mode, select Local or External.
- Click on Work Schedule to configure the user's work schedule.
Note: This option is only available for users created under FortiSIEM Analysts Group.- Under Time Range, enter the Start Time, End Time, and select the Time Zone from the Time and Region drop-down lists.
- Under Recurrence Pattern, select Recurring Days, then select the Repeat Days and Repeat Months, or select Recurring Dates, followed by selecting the Repeat Dates, and Repeat Months.
- Under Recurrence Range, click on the Start From field, and select the start date. Next, select No end date or End By. If End By is selected, click on the End By field, and select the end date.
Click Save when done.
- Click on Time Off Schedule to configure when a user plans to be off work.
Notes:
This option is only available for users created under FortiSIEM Analysts Group.
When you configure Time Off, you should only select the period of time that will be taken off from the work schedule, i.e., if a user works from 8:00am-5:00pm, then the time off period should be 8:00am-5:00pm.- Under Time Range, enter the Start Time, End Time, and select the Time Zone from the Time and Region drop-down lists.
- Under Recurrence Pattern, select Recurring Days, then select the Repeat Days and Repeat Months, or select Recurring Dates, followed by selecting the Repeat Dates, and Repeat Months.
- Under Recurrence Range, click on the Start From field, and select the start date. Next, select No end date or End By. If End By is selected, click on the End By field, and select the end date.
- Click Save when done.
- Click Save when done.