FAC - FortiToken Reset / Reissue interface for Service Desk

[80211WiGuy]

Hey friends,

We're in a situation where we need to offload the process of token resets from employees getting new phones to another team (support desk) that we're not comfortable giving administrative access to the FAC.  The process requires human intervention for security and access reasons, we can't allow self-service options.  I'm wondering if anyone's figured out a way to simplify this function through the API or other means.  We're hoping for simple, one click type action for re-issuing a fortitoken by a junior admin, after visual confirmation with the end-user.

Has anyone faced this challenge before, or maybe most places have a fully fledge secops team that can handle the load?

[AEK]

Hi

Creating admins with restricted access may help (Administration > Admin profiles).

[80211WiGuy]

Thanks, we might have to settle for this.