Account management
Use the Account Management page to create new users and manage global settings for your account. You must have Admin privileges for one or more accounts to view the Account Management page.
To view the Account Management page:
Click the gear icon at the top-right of the page and select Account Management.
-
If you have access to only one account, you will see the Account Management page for your account
- If you have Admin privileges for more than one account, you will see the Account Inventory page. From there, click an account to view it's Account Management page.
You can filter page by Account Name, Created Date, Account Code, Number of Users, Number of Sensors and Last Login. You can also sort the Accounts page by Last Login to view which accounts are in use to help determine if they should be removed.
The top of the page will display descriptive parameters for the account, namely the account's UUID and sensor code, as well as the number of users and sensors provisioned in the account. A banner is displayed when your account is set to expire in less than 90 days.
The Account Management page contains the following tabs:
| Users | Create new users and assign roles. | ||||||
| Subnets |
Lists all internal IP address ranges for the account. This list will always include the ranges defined in RFC 1918, link local addresses (169.254.0.0/16), and multicast addresses (224.0.0.0/4). We recommend adding a public IP space owned by your organization, such as post-NAT, egress, or externally-accessible IP addresses, to this list. Doing so better characterizes the directionality of your network's traffic. Contact your TSM with any public IP addresses or ranges that you would like to add to this list. Admin users can add, edit or delete subnets in an account. See Add or edit subnets |
||||||
| Modules | Displays the available integrations for FortiNDR Cloud. | ||||||
| Settings | Enable SAML SSO, mulit-factor authentication, and generate PCAP encryption keys. | ||||||
|
Billing |
The billing summary provides three top-level views:
Bandwidth and Log Ingestion tabs show your account’s usage for the current date compared to your available license. Both have three sections: Current month usage, Daily stats (configurable to any range up to 90 days), and Monthly History (configurable for any range). For customers with multiple accounts, toggle between parent and child accounts using View <Account Name> alone or View <Account Name> and child. |
Account types
FortiNDR Cloud supports three types of account:
| Account | Description |
|---|---|
| Top-Level | A stand-alone FortiNDR Cloud account. |
| Parent |
A top‑level account that may have child accounts. Users in the parent can be configured to automatically access all child accounts using the Include child accounts permission. A parent account may share its license with its child accounts. On the Billing page, the parent can view overall usage broken down by child account. Using Include Child Accounts, a parent user can be given User or Admin access to both the parent and all child accounts; roles may also be used to grant access to only some child accounts. See Creating users and assigning roles. Administration can be done only from the parent account. When a parent user performs an investigation within a child account, those investigations are visible only to the parent account users by default. The parent user may use Share Investigation to make them visible to all users of the child account. |
| Child |
A child of a parent account. Child accounts may use the parent account’s license or have their own. Users can access a child account either through a user with appropriate roles within the child account or through the parent account. Child accounts serve as isolated environments with restricted billing and controlled user access. On the Billing page, a child account can see its own usage. |