Technical Tip: Managing access to devices on FortiGate Cloud

[Wallerson]

Description	This article describes how to allow a user to manage specific devices on FortiGate cloud.
Scope	FortiGate Cloud.
Solution	To make this procedure work, it is necessary to create a folder in the 'Asset management' page and create an IAM user with access to this folder. Note: The IAM folder permission is only supported on the New Layout. Only the Master User Account can toggle between the layouts. Ensure the New Layout is enabled before starting this process (log in to https://login.forticloud.com/). Access the URL https://support.fortinet.com with the Master User Account and select 'Asset Management' under 'Services' menu. Select the gear-wheel beside the 'My Assets' folder, select 'Add a sub-folder', and provide a name. For this example, the name is 'Folder1'. Select one or more FortiGates, select the 'Move' button, and select 'Folder1'. Go to the 'Services' menu and select 'IAM':  On the IAM page, go to 'Permission Profiles' and select the 'Add New' button: Enter a profile name, select the 'Add Portal' button, select the 'FortiGate Cloud' portal, and select the 'Add' button. Select the permissions and select the 'Submit' button. Go to 'Users' page, select the 'Add New' button and select 'IAM User':  Fill in all of the mandatory fields and select 'Next': Select the folder name created before in the 'Select an Asset Folder' and the profile name in the 'Select a Permission Profile'. Select 'Next', and the confirmation page will be displayed. Select the 'Confirm' button to create the user.  Select 'Generate Password' on the 'Successful User Registration' page. After, select 'Generate Password' again to get the link. Select the link and paste it into the address bar in a new browser tab. Set a new password and take note of the Account ID. Select 'Submit': Open the FortiGate Cloud login page: https://login.forticloud.com/. Select 'Login' and select 'IAM Login': Enter the Account ID, Username, and Password, then select 'Log In'. On the next page, select 'GET VERIFICATION CODE'. The code will be sent to the email address associated with the account: proceed with the verification. After the verification, the user will have access to the FortiGate Cloud console and the devices added to the folder created before will be displayed: Related article: Creating a new IAM user | FortiCloud Account Services 23.3.0 | Fortinet Document Library.