Account and Users

1.0 Introduction

This article provides an overview of the account and user management operations that can be performed by a Fortanix Armor System Administrator in the System Administration account, including enabling or disabling access and managing administrator roles.

2.0 Access System Administration Account

A system administration account is a specialized master account within the Fortanix Armor platform that grants administrators privileged access to configure, manage, and oversee the Fortanix Armor operations.

This type of account provides the necessary permissions to manage user accounts and configure system settings.

Administrators with system administration privileges can perform essential tasks such as setting up security policies, managing access controls, overseeing user roles, and ensuring the overall health and security of the Fortanix Armor environment.

To access Fortanix Armor as a system administrator, you need to sign up and log in using valid credentials.

For detailed instructions on how to sign up and log in, refer to Fortanix Armor – Getting Started.

After you log in to the Fortanix Armor platform, you can access the System Administration account.

3.0 Manage System Administration Accounts

As a System Administrator, you can access and manage all the system administration accounts on the Accounts page.

NOTE

Account approval behavior for newly created accounts can be configured using the Armor System Management settings through the Armor REST API. Depending on the configured approval policy, newly created accounts may appear on the APPROVED, PENDING APPROVAL, or DISAPPROVED tab.

For detailed instructions to configure these policies, refer to Fortanix Armor System Administration Settings – System Management.

• APPROVED: Lists all the approved accounts that can be actively used.

• PENDING APPROVAL: Lists accounts that have been created and are awaiting approval. Newly created accounts appear here until they are reviewed. These accounts cannot be used until they have been approved.

  Click APPROVE to approve an account or REJECT to reject it.

• DISAPPROVED: Lists accounts that have been disapproved. These accounts are disabled by default and cannot be enabled or used.

For the approved accounts, you can perform the following:

• Disable the account

• Enable the account

3.1 Disable an Account

As a system administrator, you can disable an approved account if it violates security standards, is being misused, breaches account policies, or in other similar situations.

Perform the following steps to disable the account on the APPROVED tab:

1. Click the toggle () for the account to be disabled. All the accounts are enabled by default.

2. In the Disable account dialog box, click Disable to disable the account.

NOTE

When an account is disabled, all access and active sessions will immediately be terminated, and the account will no longer be available for any operations.

3.2 Enable the Account

As a system administrator, you can enable the disabled account if you want to resume all the activities for that account.

Perform the following steps to enable the account on the APPROVED tab:

1. Click the toggle () for the account to be enabled.

2. In the Enable account dialog box, click ENABLE to enable the account.

4.0 Access System Administration Users

As a System Administrator, you can view all system administration users on the Users page in the Fortanix Armor platform, including your own user account, other System Administrators, and System Operators.

NOTE

To invite a new System Administrator or System Operator, in the Fortanix Armor user interface (UI), click the account menu on the top navigation bar, select System Administration account from the list, and then click the Identity & Access Management solution tile.

For instructions on inviting users and assigning roles, refer to Fortanix Armor - Getting Started.

When creating a system administration user, assign one of the following roles:

• System Administrator – Has full administrative permissions, including managing accounts and users.

• System Operator – Can view users and accounts but cannot manage them.