Technical Tip: How to access a firewall from a FortiGate Cloud subaccount

[Mrinmoy]

Description	This article describes how to assign remote access to a FortiGate Cloud sub-account, which is sometimes necessary for business requirements.
Scope	FortiGate connected to FortiGate Cloud.
Solution	If the FortiGate does not have a valid subscription to FortiGate Cloud, access through FortiGate Cloud is read-only. See FortiGate Cloud Administration Guide: Feature Comparison. Verify management connectivity using the primary account. Log in to https://support.fortinet.com/ and select Service -> IAM.   Create an IAM permission profile allowing Read-Write access to the FortiGate Cloud portal. Note: If the Permission profile is created as 'Local', it can only be used by an IAM user with Local access and cannot be used for Organization users. Similarly, a profile created under 'Organization' cannot be used for Local IAM users. Make sure to choose the appropriate type. For more details, see Technical Tip: FortiGate Cloud Organizations basic deployment example. 1.Create a new IAM user and assign the new profile to this user. Generate a password for the IAM user, copy the reset link, and share it with the new user. Using the reset link, the new user must create their account password. Additionally, the user must note down the account ID number. The new user selects the 'IAM login' option from https://support.fortinet.com/ to log in to their account. It will verify the user one more time. After logging in, the user will be able to access the 'FortiGate Cloud' portal from the Services option. The user is redirected to the FortiGate Cloud portal. Select Assets -> Select Remote Access. The user is directed to a FortiGate login page and may log in with a valid FortiGate administrator.                                                                                                                                                                                                     If the user should use their existing IAM credential to authenticate, FortiCloud single sign-on must be enabled in the FortiGate configuration. This is enabled by default for new devices, see FortOS Administration Guide: FortiCloud SSO.