Fortinet black logo
1.0.0

Admin Groups

Admin Groups

Admin groups allow you to assign permissions to the sponsors. You can set role-based permissions for sponsors to allow or restrict access to different functions, such as creating accounts, modifying accounts, generating reports, and sending account details to users via email or SMS. Navigate to Access Management > Admin Groups and update the following settings.

Update the following user group settings in the subsequent configuration tabs.

  • Edit and set the Group Permissions for the new user group as per your requirement.
  • Create Group Mappings rules to map the sponsor to a group based on information returned from the authentication server. Select the server you wish to create a rule for and then select whether the group class name equals to or contains a specific term.
  • The Account Groups allow a sponsor to assign different levels of access to a user account. You can select which sponsor user groups are allowed to assign certain profiles to users. By default, a sponsor user group has the ability to assign users to the default profile. The administrator can choose the additional groups the sponsor can assign, or can remove the default profile from the user group.
  • The Usage Profiles allow a sponsor to assign different levels of access usage to a user account. You can select the sponsor user groups that are allowed to assign certain usage profiles to guests. By default, a user group has the ability to assign guests to the default usage profile. The administrator can select which additional usage profiles the sponsor can be assigned, or can remove the default usage profile from the user group.
  • The Device Account Groups allow a sponsor to assign different levels of access to a device account. You can select which sponsor user profiles are allowed to assign certain account groups to device accounts.
  • A user group has the ability to assign users to the Device Usage Profile. The administrator can select which additional usage profiles the sponsor can be assigned, or can remove the default device usage profile from the user group. Each user group must have the ability to assign Users in at least one device usage profile.
  • In the Group Preferences the administrators can restrict/disable or enable controls on a sponsors default preferences page.

Admin Groups

Admin groups allow you to assign permissions to the sponsors. You can set role-based permissions for sponsors to allow or restrict access to different functions, such as creating accounts, modifying accounts, generating reports, and sending account details to users via email or SMS. Navigate to Access Management > Admin Groups and update the following settings.

Update the following user group settings in the subsequent configuration tabs.

  • Edit and set the Group Permissions for the new user group as per your requirement.
  • Create Group Mappings rules to map the sponsor to a group based on information returned from the authentication server. Select the server you wish to create a rule for and then select whether the group class name equals to or contains a specific term.
  • The Account Groups allow a sponsor to assign different levels of access to a user account. You can select which sponsor user groups are allowed to assign certain profiles to users. By default, a sponsor user group has the ability to assign users to the default profile. The administrator can choose the additional groups the sponsor can assign, or can remove the default profile from the user group.
  • The Usage Profiles allow a sponsor to assign different levels of access usage to a user account. You can select the sponsor user groups that are allowed to assign certain usage profiles to guests. By default, a user group has the ability to assign guests to the default usage profile. The administrator can select which additional usage profiles the sponsor can be assigned, or can remove the default usage profile from the user group.
  • The Device Account Groups allow a sponsor to assign different levels of access to a device account. You can select which sponsor user profiles are allowed to assign certain account groups to device accounts.
  • A user group has the ability to assign users to the Device Usage Profile. The administrator can select which additional usage profiles the sponsor can be assigned, or can remove the default device usage profile from the user group. Each user group must have the ability to assign Users in at least one device usage profile.
  • In the Group Preferences the administrators can restrict/disable or enable controls on a sponsors default preferences page.