User management

User access to FortiSOC is managed within the FortiCloud Identity & Access Management (IAM) portal. In this portal, you can create IAM users and assign permission profiles to define portal access.

Permission profiles allow you to explicitly enable or disable access to portals, including FortiSOC, and grant portal-specific permissions for the enabled portals. In addition, you can further configure Role-Based Access Controls (RBAC) within the FortiSOC GUI. For more information, see Role-based access control (RBAC).

FortiCloud also offers an IAM feature that enables you to create and manage external IdP roles that allow users from your organization to log in to the FortiSOC portal using the user credentials with your organization's ID provider. External IdP users are authenticated by your organization's ID provider. After the user is authenticated, they can access FortiSOC based on their role. For more information, see Authentication and single sign-on (SSO).

To create a permission profile:

1. Login to https://support.fortinet.com/.

2. To access the IAM portal, go to Services > IAM.

3. In the IAM portal, go to Permission Profiles.

4. Click Add New.

   The New Portal Permission Profile page displays.

5. In the Basic Info section, enter the permission profile name and select the status.

6. Click Add Portal.

   A list of available portals displays.

7. Select FortiSOC and any other required portals, and the click Add.

   The selected portals are displayed in cards.

8. Define the portal permissions in the FortiSOC card.

   The permissions define the users' Roles within FortiSOC.

   • Admin: Full Admin role

   • Read / Write: Analyst role

   • Read Only: Read-Only Admin role

   • Custom: Assign the user to a predefined or custom role in the FortiSOC GUI.

   For more information about those roles, see Role-based access control (RBAC).

9. Click Save.

   This permission profile can now be assigned to users. If needed, create another permission profile with a different level of access to FortiSOC (or other portals).

   For information on creating permission profiles, see the FortiCloud Account Services Identity & Access Management documentation.

To create an IAM user:

1. Login to https://support.fortinet.com/.

2. To access the IAM portal, go to Services > IAM.

3. In the IAM portal, go to Users.

4. Click Add New > IAM User.

5. In the User Details page, enter the user details, and then click Next.

6. In the User Permissions page, assign the IAM user the appropriate permission scope and profile, and then click Next.

7. In the Confirmation page, click Confirm to complete the user creation process.

8. In the Successful User Registration page, click Generate Password to generate a reset password link for the user to login.

9. Click Copy Reset Link.

Once this is complete, you can share the link with the user to access their FortiCloud account. They will have access to the FortiSOC portal as defined in the permission profile.