Fortinet black logo

Admin Guide

Realms

Copy Link
Copy Doc ID 0a6c5280-a080-11ee-8673-fa163e15d75b:695536
Download PDF

Realms

A realm in FTC is a set of users identified as valid users of one or more auth clients and can be controlled by the same adaptive auth profile in the realm settings. With realms, the admin user can control settings such as user quota and MFA method. FTC comes with a default realm for your convenience.

You can open the Realms page by clicking Realms on the main menu.

The Realms page shows information about the realms in your account. If you are a global admin, you will see all realms assigned to all sub-admin groups in your account; if you are a sub-admin user, you will see the realms assigned to your sub-admin group only.

Note

Starting with the 21.2.d release, the following three tabs visible to customers of time-based subscriptions only have been added to the top of the Realms page:

  • Current Realms—The number of the realms currently created in your account.
  • Max Realms—The maximum number of realms that your subscription can support.
  • Remaining User Quota—The number of end-user quota left in your account.

The following table highlights the information on the Realms page.

Parameter Description
Check box

Enables you to select a realm.

Note: The Delete button above the table becomes activated when a realm is selected. You can click the button to delete the realm. Alternatively, you can delete a realm by clicking the corresponding Delete icon in the Actions column. For more information, see Delete a realm.

Name

The name of a realm.

User Count

The number of end-users on the realm.

Allocated User Quota

The number of end-user quota allocated to the realm.

Description A brief description about the realm that the global admin added when creating the realm.
Client Count The number of auth clients assigned to the realm.
Tool bar

The tool bar slides in from the right end of the row when you hover the cursor over an entry. It has the following tools:

  • Refresh Realm—Refreshes the entry to get the latest data about the realm.
  • Edit Realm—Edits the name and/or description of the selected realm. If you are on a time-based subscription, you are also able to set or change the user quota allocation to the selected realm within the set value range.
  • Show Permission—Opens a dialog which shows the sub-admin groups that have access to the realm. You can also remove sub-admin groups from the access list by deleting them.
  • Settings—Opens the Settings page which shows the settings of the realm. See Settings.
  • Delete—Deletes the realm. See Delete a realm.

Create a custom realm

  1. On the Realms page, click Add Realm.

    The Add New Realm dialog opens.

  2. Specify the name of the realm.
  3. (Optional) Enter a brief description.
  4. Click OK.
  5. On the Realms page, locate the realm that you have just created. (Note: Steps 5 through 8 apply to time-based subscriptions only.)
  6. Place the cursor over the entry to bring out the slide-in menu from the right end of the row.
  7. Select the Edit Realm button to open the Edit Realm dialog.
  8. Click or drag the slider to set the user quota to be allocated to the realm.
  9. Click OK.

Edit a realm

Note

Options for editing a realm vary, depending on the type of your FTC subscription. If you are on a credit-based subscription, you can only make changes to the name and description of the realm; if you are on a time-based annual subscription, you can also change the user quota allocated to the realm within the stated range.

  1. On the Realms page, identify the realm of interest and mouse over it.
  2. In the slide-in tool bar, click the Edit Realm button to open the Edit Realm dialog.
  3. Make the desired changes to the realm name and the description.
  4. Drag the slide bar to set or change the allocated user quota. (Note: This options applies to time-based subscription only.)
  5. Click OK.

View realm permission

  1. On the Realms page, identify the realm of interest and mouse over it.
  2. In the slide-in tool bar, click the Show Permission button.
  3. The Access List for Realm dialog opens, showing all the sub-admin groups that have access to the realm.
Note

To close the Access list for realm dialog, click the Close button at the bottom of it or anywhere outside the dialog.

Remove sub-admin groups from a realm access list

  1. On the Realms page, identify the realm of interest.
  2. In the toolbar, click the Show Permission button to open the Access List for Realm dialog.
  3. Identify the sub-admin group of interest, and click the corresponding x (Delete) icon.

Delete a realm

  1. On the Realms page, identify the realm of interest and mouse over it.
  2. In the slide-in tool bar, click the Delete button.
Caution
  • You cannot delete the default realm.
  • If a realm has auth clients assigned to it, you must delete the auth clients from the realm before deleting the realm.

View realm settings

  1. On the Realms page, identify the realm of interest and mouse over it.
  2. In the slide-in tool bar, click the Settings button to open the Realm Settings page.

Realms

A realm in FTC is a set of users identified as valid users of one or more auth clients and can be controlled by the same adaptive auth profile in the realm settings. With realms, the admin user can control settings such as user quota and MFA method. FTC comes with a default realm for your convenience.

You can open the Realms page by clicking Realms on the main menu.

The Realms page shows information about the realms in your account. If you are a global admin, you will see all realms assigned to all sub-admin groups in your account; if you are a sub-admin user, you will see the realms assigned to your sub-admin group only.

Note

Starting with the 21.2.d release, the following three tabs visible to customers of time-based subscriptions only have been added to the top of the Realms page:

  • Current Realms—The number of the realms currently created in your account.
  • Max Realms—The maximum number of realms that your subscription can support.
  • Remaining User Quota—The number of end-user quota left in your account.

The following table highlights the information on the Realms page.

Parameter Description
Check box

Enables you to select a realm.

Note: The Delete button above the table becomes activated when a realm is selected. You can click the button to delete the realm. Alternatively, you can delete a realm by clicking the corresponding Delete icon in the Actions column. For more information, see Delete a realm.

Name

The name of a realm.

User Count

The number of end-users on the realm.

Allocated User Quota

The number of end-user quota allocated to the realm.

Description A brief description about the realm that the global admin added when creating the realm.
Client Count The number of auth clients assigned to the realm.
Tool bar

The tool bar slides in from the right end of the row when you hover the cursor over an entry. It has the following tools:

  • Refresh Realm—Refreshes the entry to get the latest data about the realm.
  • Edit Realm—Edits the name and/or description of the selected realm. If you are on a time-based subscription, you are also able to set or change the user quota allocation to the selected realm within the set value range.
  • Show Permission—Opens a dialog which shows the sub-admin groups that have access to the realm. You can also remove sub-admin groups from the access list by deleting them.
  • Settings—Opens the Settings page which shows the settings of the realm. See Settings.
  • Delete—Deletes the realm. See Delete a realm.

Create a custom realm

  1. On the Realms page, click Add Realm.

    The Add New Realm dialog opens.

  2. Specify the name of the realm.
  3. (Optional) Enter a brief description.
  4. Click OK.
  5. On the Realms page, locate the realm that you have just created. (Note: Steps 5 through 8 apply to time-based subscriptions only.)
  6. Place the cursor over the entry to bring out the slide-in menu from the right end of the row.
  7. Select the Edit Realm button to open the Edit Realm dialog.
  8. Click or drag the slider to set the user quota to be allocated to the realm.
  9. Click OK.

Edit a realm

Note

Options for editing a realm vary, depending on the type of your FTC subscription. If you are on a credit-based subscription, you can only make changes to the name and description of the realm; if you are on a time-based annual subscription, you can also change the user quota allocated to the realm within the stated range.

  1. On the Realms page, identify the realm of interest and mouse over it.
  2. In the slide-in tool bar, click the Edit Realm button to open the Edit Realm dialog.
  3. Make the desired changes to the realm name and the description.
  4. Drag the slide bar to set or change the allocated user quota. (Note: This options applies to time-based subscription only.)
  5. Click OK.

View realm permission

  1. On the Realms page, identify the realm of interest and mouse over it.
  2. In the slide-in tool bar, click the Show Permission button.
  3. The Access List for Realm dialog opens, showing all the sub-admin groups that have access to the realm.
Note

To close the Access list for realm dialog, click the Close button at the bottom of it or anywhere outside the dialog.

Remove sub-admin groups from a realm access list

  1. On the Realms page, identify the realm of interest.
  2. In the toolbar, click the Show Permission button to open the Access List for Realm dialog.
  3. Identify the sub-admin group of interest, and click the corresponding x (Delete) icon.

Delete a realm

  1. On the Realms page, identify the realm of interest and mouse over it.
  2. In the slide-in tool bar, click the Delete button.
Caution
  • You cannot delete the default realm.
  • If a realm has auth clients assigned to it, you must delete the auth clients from the realm before deleting the realm.

View realm settings

  1. On the Realms page, identify the realm of interest and mouse over it.
  2. In the slide-in tool bar, click the Settings button to open the Realm Settings page.