Managing admin groups

FortiIdentity Cloud has two levels of admins: global_admin (global administrator) and sub_admin (sub-administator). Anyone from a customer organization with a valid user account on FortiCloud (FC) can log on to the FIC portal using their FC username and password. By default, the FC account holder from your organization who logs onto the FIC portal first automatically becomes the global_admin of your FIC account. In addition, the main FC account holder of your organization is the de facto global_admin of your FIC account.

The Administrators menu is accessible to global_admin users only; sub_admin users will not be able to see this menu.

The Administrators page shows all the admin groups that the global_admin has created. It also provides the tools for the global_admin to manage admin groups. By default, all admins created by the global_admin become sub_admins.

You (the global_admin) can access the Administrators page by click Administrators on the main menu.

The following table highlights the information of sub-admin group configuration shown on the Administrators page.

Column Header	Description
NAME	The name of an admin group.
DESCRIPTION	The description of the group. (Optional)
LEVEL	The level of administration of the group: global_admin—The highest level of administration. Note:The global_admin group is the default admin account, and cannot be deleted. sub_admin—Any admin group that the global admin has added. Users in a sub-admin group are all sub-admin users. They can only access the realms assigned to their group, and manage the applications in those realms and the users on those applications .
MEMBER COUNT	The number of sub-admins in the group. Note: The numeric value indicates the number of users (sub-admins) in a given admin group. Clicking the value opens a pop-up window that shows the usernames, email addresses, and user IDs of those users.
Tools	The tool bar slides in from the right end of the row when you mouse over the entry in the table. It shows the following tools: Edit—Edits the administrator group. Delete—Deletes the administrator group.

• Creating a sub-admin group

• Adding users to the admin group

• Adding realms to the admin group

• Editing sub-admin group configuration

• Deleting a sub-admin group