Only admin users can access the FortiToken Cloud (FTC) portal. There are two types of administrator accounts: the global administrator (global_admin) and sub-administators (sub_admin). Anyone from your organization with a valid user account on FortiCloud (FC) can log in to the FTC portal using his or her FC username and password. By default, the FC account holder from your organization who logs in to the FTC portal first automatically becomes the global administrator of your FTC account. The main FC account holder of your organization is the de facto global administrator of your FTC account.
The Administrators menu is accessible to the global admin user only. Sub-admin users will not be able to see this menu.
The Administrators page provides the tools for the global admin to create and manage sub-admin groups. It also shows all the sub-admin groups that the global admin has created.
You (the global admin) can access the Administrators page by click Administrators on the main menu.
The following table highlights the information of sub-admin group configuration shown on the Administrators page.
|Name||The name of an admin group.|
|Description||The description of a group. (Optional)|
The level of administration of a group:
The number of sub-admins in a group.
Note: The numeric value indicates the number of users (sub-admins) in a given admin group. Clicking the value opens a pop-up window that shows the usernames, email addresses, and user IDs of those users.
The tool bar slides in from the right end of the row when you mouse over an entry in the table. It shows the following tools:
- On the Administrators page, click Add Admin Group to open the Add New Admin Group dialog.
- Specify the group name.
Note: The group name can only contain lower-case letters from "a" to "z" and/or numeric values from "0" to "9", and underscore "_" and/or hyphen "-". It must be between 3 and 36 characters in length.
- (Optional) Enter a brief description of the group.
- Click OK.
Note: The sub-admin group that you've just created appears on the Administrators page. Your then need to add sub-admin users and assign realms to the group, as discussed in the following sections.
You must have sub-admin users already in your account to add them to a sub-admin group.
- In the Add Admin Group table, click the name of the group of interest to open the Edit Admin Group dialog.
- To add admins to the group, click Add Admin to open the Manage Admins dialog.
- Under Admins not in Group, select the admins to be added, click Add To.
- Click Close.
Once you have added sub-admins to a group, you must assign realms to the group to enable the sub-admins to manage the auth clients and FTC end-users in those realms.
- Click Add Realm to open the Manage Realm dialog.
- Under Not Managed by Group, select the realm(s) of interest and click Add To.
- Click Close.
You can edit an admin group by changing its name and description, and/or by adding or deleting sub-admins and realms in the group.
- On the Administrators page, identify the group of interest and mouse over it.
- From the slide-in tool bar, click the Edit button to open the Edit Admin Group dialog.
- To change the group name, highlight the Group Name and type a new name over it.
- To modify the description of the group, highlight the Group Description, and type a new one over it.
- To add more sub-admins to the group, click Add Admin. See Create a sub-admin group.
- To delete a sub-admin, identify the sub-admin and click x (Delete).
- To add more realms to the group, click Add Realm. See Add realms to a group.
- To delete a realm, identify the realm and click x (Delete).
- Click Close.
The global admin can delete any sub-admin group, except the default 'global_admin" group. Also, when deleting a sub-admin group with sub-admins in it, you must delete the sub-admin users from the group first to delete the group. See Edit sub-admin group configuration.
- On the Administrators page, identify the admin group of interest, and mouse over it.
- From the slide-in tool bar, click the Delete button.