Super Account Settings

Proper management of client accounts requires an understanding of navigation in Fortra VM.

Switch Between Accounts

When logged into Fortra VM, the initial Dashboard, Menus, and Account Profile information will access the MSP account.

To access a list of all available client accounts, select Client Ops > Accounts from the left navigation menu. Select an account name to view or modify the account.

Navigation from this point will display the client’s Dashboard, Menus, and Account Information.

NOTE: One difference between a parent MSP account and a client account is the client dashboard header is blue, as seen below. MSP super accounts feature a gray header.

The top of the side navigation menu now shows an ACTIVE CONTEXT item and displays the client name. This will be visible any time a client account is engaged. To exit the client account, select the Close button x to return to the parent MSP account.

Account Management

When an account is no longer needed, you can disable, deactivate, or delete it to keep Fortra VM streamlined.

  1. From the left navigation menu, select Client Ops > Accounts.

  2. Select the desired account.

  3. Select the More button, and then select one of the following based on the account's current status:

    1. Disable access - Revokes all user access to the account and makes no changes to scans or scanners. Scheduled scans will continue to run uninterrupted.

    2. Enable access - Re-enables a disabled account.

    3. Deactivate account - Prepares an account for future deletion by setting users to read-only, removing all associated scans and scanners, and scheduling the account for deletion after the data retention period expires (1 year, or if any PCI-ASV scan data is present on the account, 3 years). Under the General section, the Deactivation on field shows the date the account was deactivated and the Automatically delete on field shows the date of when the account will be deleted.

      While you can reactivate an account, doing so requires you to recreate scans and scanners and re-enable each user manually. It is recommended to only deactivate an account when it needs to be permanently deleted.

    4. Reactivate account - Reactivates a deactivated account.

    5. Delete account - Immediately and permanently deletes an account without providing a data retention period.

After making your selection, the Account status field will show the current state of the account.

Configuration Settings

You can modify and set configuration settings for MSP Super accounts by selecting Account > Settings from the left navigation menu.

User Authentication Scheme

NOTE: The Fortra SSO and Fortra Platform settings utilize Fortra branding. Some theme settings such as colors and logos may be lost or altered. Custom branding for Fortra SSO and Fortra Platform will be offered in the future. Contact Fortra Support if you have any questions about the best user authentication method for your organization.

Use the following toggles to configure user authentication settings:

  • Duo Security - Controls whether Duo Security dual-factor authentication is available for users. See Log In with Duo® Two-Factor Authentication for more information.

  • Fortra Single Sign-on (SSO) - Controls whether single sign-on authentication through Fortra's Identify Provider (IdP) is available for all users.

  • Fortra Platform - Controls whether the Fortra Platform view is enabled for users. This toggle only appears while in standalone mode.

  • Fortra SSO Default on for Owned Accounts - Controls whether the Fortra Single Sign-on (SSO) toggle is automatically on for newly created nested accounts. See Create New Client Account for more information.

  • Fortra Platform Default On For Owned Accounts - Controls whether the Fortra Platform toggle is automatically on for newly created nested accounts. See Create New Client Account for more information.

MSP Configurations

Modifiable settings for the Super Account include:

  • Ability to manage MSP configurations
  • Ability to create Super accounts
  • Max Super account creation limits
  • Max Super depth limits
  • Ability to create General accounts
  • Max General account creation limits
  • Ability to create Trial accounts
  • Max Trial account creation limits
  • Access to the Public Trial API
  • Ability to provide Trial services to MSP customers
  • Subscription enforcement, services that can be offered
  • Max sellable IP limits for VM, PT, PCI, ATS, and WAS
NOTE: Ensure the correct client account is engaged when providing customer service to prevent incidental mistakes in MSP Super Account.

Subscription Usage

You can view and track subscriptions usage for the client with the newly added Subscription Usage breakdown.

  1. From the navigation menu, select Account > Account Profile.

  2. The table is in the Subscription Usage section.


Users & Roles

  1. Navigate to Account > Users.
  2. Select + New User.
  3. Complete User Information fields for Full name, Email, and Role.

  4. As a Role is selected, the corresponding User Permissions will display below. Access features (or permissions) each Role is granted displays by way of the ON and OFF toggles.

Each user on your super account can be granted different levels of access to Fortra VM.

Roles are defined and set under Account > Roles.

Custom roles can be created by selecting + New role. Here you can define privileges for roles and define a rule set for your operation.

  1. Define a Role Name and Description.
  2. Use the toggle switches to select ON or OFF for each one of the User Permissions.

  3. Use Users With This Role to select appropriate users and click Save.