Technical Tip: FortiGate Cloud error A01I08-17 for IAM user

[syadav]

Description	This article describes how to resolve the FortiGate cloud error A01I08-17 for IAM users.
Scope	FortiCloud.
Solution	The IAM user logs into the FortiGate cloud and gets error A01I08-17 (unauthorized) as shown in the below screenshot: This is a permission issue, where the IAM user lacks permission to access the FortiGate cloud portal. Note that the default built-in permission profile ‘SysAdmin’ only provides access to Asset Management and IAM. Follow the below steps to ensure that the IAM user has permission for the FortiGate cloud. Login to the support portal with the Master account. Navigate to Services -> IAM. Navigate to the Permission profile then select  ‘Add New’. Provide a name to the profile and select ‘Add Portal’. Check FortiGate Cloud then select Add. Change the permissions to ‘Read’ or ‘Read & Write’ as needed, then select ‘Submit’. Navigate to Users then select the user. Select ‘User Permissions’, and then ‘Edit’. Under permission profile, select the newly created permission profile and select ‘Update’. The IAM user will now be able to log in to the FortiGate cloud portal. The IAM user can also be used to log in to the FortiGate using single sign-on. To enable this feature follow this guide: FortiCloud SSO If the IAM user is getting an error while logging in to FortiGate via single sign-on, follow this article. Technical Tip: 'This FortiCloud account XXXX is not authorized to sign in on this FortiGate' via acc...