Overview
Learn about managing individual user accounts after initial setup, including limiting use of the default admin account, assigning predefined or custom roles, separating CLI and web credentials, and configuring user access for improved security and auditing.
After you complete the initial setup, the only web interface user on the system is the admin user, which has the Administrator role and access. Users with that role have full menu and configuration access to the system. We recommend that you limit the use of the admin account (and the Administrator role) for security and auditing reasons. In the Firewall Management Center Virtual GUI, manage user accounts on the page.
The admin accounts for accessing the Firewall Management Center Virtual using the shell and accessing the Firewall Management Center Virtual using the web interface are not the same, and may use different passwords.
Creating a separate account for each person who uses the system allows your organization not only to audit actions and changes made by each user, but also to limit each person’s associated user access role or roles. This is especially important on the Firewall Management Center Virtual, where you perform most of your configuration and analysis tasks. For example, an analyst needs access to event data to analyze the security of your network, but may not require access to administrative functions for the deployment.
The system includes ten predefined user roles designed for a variety of administrators and analysts using the web interface. You can also create custom user roles with specialized access privileges.