Technical Tip: 'This FortiCloud account XXXX is not authorized to sign in on this FortiGate' via accessing FortiGate cloud from a new master FortiCloud account

[samandeep]

Description	This article describes that new IAM users will not be able to remote access the on-prem FortiGate via FortiGate cloud and getting this error 'This FortiCloud account XXXX is not authorized to sign in on this FortiGate'.
Scope	FortiCloud service v24.2.x.
Solution	The possible cause of this issue is that the IAM account does not have valid permissions to access the FortiGate. To resolve this issue: Open Support portal (support.fortinet.com). Go to Services -> select 'IAM'. Select 'Permission profiles'. Create a new permission profile (Note: default sysadmin permission profile does not have managed FortiOS feature enabled). Select to add portal. Select portals based on the requirement but for accessing on-premise FortiGates select 'FortiOS SSO and managed FortiGate' must be configured to allow portal access for administrators. Enable the access on both portals and give the access types based on the screenshots. Assign this permission profile to the new IAM user. Ensure the status of that user must be active. Login to the account via that IAM user. 10. Attempt to remote access the FortiGate. After all these steps are taken, a successful attempt looks like the below screenshot: Note: If the configuration is the same as describes in this KB article and the FortiCloud Account still shows as unauthorized, review whether the Device license was set to 'Pay as you go'. At this time, 'Pay as you go' is not supported by FortiCloud SSO login.