Users
The FortiAIOps allows administrators to create users, who will subsequently be available in the FortiAIOps application.
User permissions are indirectly assigned through their membership in user groups. By default, all users are members of the Default user group. The admin user and all device groups are automatically members of the Super User user group, and cannot be moved to any other user group. All users must belong to at least one user group. It is recommended to assign both the device group and users to the user group upon its creation to ensure that users have access to the assigned device group. If a user is removed from a user group, they will be moved to the Default user group.
Note: User Management configuration can only be performed by users with the System Administrator and Super User roles.
Adding a New User
Perform the following steps to add a new user:
-
Click +Add User.
-
Enter the user information including full name, username and password.
-
Specify the role. FortiAIOps supports Guest, Standard_User and Super_User roles.
User Role Access Level Guest Read only access to all features in the system. Standard_User Read/Write privilege to all configurations and features except system settings . Super_User/ System Administrator Read/Write access across system. All super users will have access to all device groups, all devices, all system settings. -
Click Save.
Notes:
-
Once you have created users in FortiAIOps, it is necessary to refresh the FortiAIOps application portal in order for the users list to be updated and displayed in the User Groups page.
-
The super user or system administrator can provide device group access to a user by choosing the device group and the users in the user group option in FortiAIOps application portal. See User Groups.
-
The user list for the FortiAIOps CLI and GUI are different.
Editing User Information
Select a user and click Edit to modify user information. This includes changing the user's full name, role or password.
Activating/Deactivating User
Select a user and click Activate/Deactivate to enable or disable the user's ability to log in or access the system. Deactivated user accounts can be reactivated at any time.