(v2.x) User types

Tenant Administrator / Super Admin (Customer or Partner)

Each customer or partner has a tenant. The tenant is the unique instance of the Admin Portal. The Tenant Administrator / Super Admin is the first account created in the system. It is tied to the FortiCloud / FortiCare account used to initialize the service. The Super Admin also inputs the licenses for Fortinet products and services from the FortiCloud / FortiCare portal.

The Tenant Administrator user is the super admin of the SAT (Security Awareness and Training) Service and is responsible for setting up the customer account (users, authentication method, branding) as well as training campaigns, reporting and remediation. They can also create additional Administrators of the system. These additional Administrators have full access to perform the same functions as the Super User account, except they cannot access the FortiCloud/FortiCare portal.

If the sub administrators require access to the Assets and FortiPhish configuration, they can create a FortiCloud / FortiCare account and the Tenant Administrator FortiCloud / FortiCare account owner can add them as a sub account with administrative permissions in order to access these additional features.

If a Partner organization is configuring and managing the tenant, then the customer administrative account must be used by the Partner. There are instructions on configuring partner access in the Account Management section of this guide. In order to access Partner permissions, a support ticket must be created to access this functionality.

Tenant Sub Administrators (Customer or Partner)

Creating Sub Administrators on the Fortinet Security Awareness and Training Service will be covered in the Account Management Section of this guide.

These additional Administrators have full access to perform the same functions as the Super User account, except they cannot access the FortiCloud/FortiCare portal.

If the sub administrators require access to the Assets and FortiPhish configuration, they can create a FortiCare/Forticloud account and the Tenant Administrator FortiCare/FortiCloud account owner can add them as a sub account with administrative permissions in order to access these additional features.

Partner

If you are a partner, once you have initialized your tenant, you must reach out to infosec_awareness@fortinet.com and request partner access to your tenant. This will allow Partner access to the following functionality:

• Content – All modules, micro-modules and nano-modules
• Domains – For the configuration of Domains and Custom Sub Learning Domains
• Users – for LDAP import
• Authentication – for configuration of Single Sign-on (SAML2 / IdP)
• Account Management - Customer Account Management (add customer administrators to tenants)
• Appearance – for customization of appearance settings.

Once Partner access is granted, invitations can be sent to Customers via email to invite them to allow the partner to log in as the Customer Tenant Administrator. There are instructions on configuring partner access in the Account Management section of this guide.

Learner

This user (usually employees) is the intended audience for the Security Awareness and Training Service. The learners receive the training campaigns set up by the administrator. Administrators can also access the service as a learner. They select whether to access the Admin console after logging in and can toggle between the Admin and learner app consoles.

Learners can authenticate by entering their login credentials from the URL provided by their tenant Admin.