Manage Accounts

Enterprise customers can use the Infinity Portal to create and manage their own organizational hierarchy within the portal. This allows large, independent enterprise customers to organize multiple sites or branches under a single parent account and manage permissions, resources, and visibility efficiently. It can be especially useful for complex organizations with multiple subsidiaries or locations, such as companies with branches in different countries.

The Manage Accounts page appears in Infinity Portal accounts that have created sub-accounts (child accounts).

Dashboard

The dashboard provides visibility into your managed sub-accounts in a single pane of glass.

With the dashboard, you can see and search:

  • Your sub-accounts and their sub-accounts

  • Total number of sub-accounts, including accounts with trial and paid contracts

  • Accounts with services that require activation

  • Accounts with contracts close to expiration

  • Accounts with expired contracts

When you click one of the dashboard widgets, it applies a corresponding filter and opens the Filters side panel. You can simultaneously use more than one widget or filter criterion.

Accounts

The Manage Accounts page contains a list of all sub-accounts associated with the current account.

How to Manage Sub-Accounts

You can create a hierarchy of sub-accounts, such as company branches, departments, or sites, under your main customer account. The sub-account inherits users from the parent account based on group inheritance settings. To configure group inheritance settings, see User Groups.

To navigate from a sub-account to its parent account, from the top toolbar, click the arrow icon .

  1. In the left-side menu, select General.

  2. Click Create sub account.

    The New Sub Account window opens.

  3. Enter an Account Name.

  4. Select a Parent Account.

    Note - By default, when you create a sub-account, the parent account is the account that is currently open. If this account has sub-accounts, you can select one of these accounts to be the Parent Account.

  5. Select a location for Data Residency.

    Note - Availability of data residencies depends on the data residency of the parent account.

  6. Select a Country and City.

  7. Enter a Website or web Domain that is associated with the account owner.

  8. Click Create.

    The New Sub Account window closes. The new sub-account appears on the > Manage Accounts page.

  1. On the top toolbar, click > Manage Accounts.

  2. On the toolbar, click New sub account.

    The New Sub Account window opens.

  3. Enter an Account Name.

  4. Select a Parent Account.

    Note - By default, when you create a sub-account, the parent account is the account that is currently open. If this account is part of an organizational hierarchy (has sub-accounts or a parent), you can select any parent account in the hierarchy to be the Parent Account.

  5. Select a location for Data Residency.

    Note - Availability of data residencies depends on the data residency of the parent account.

  6. Select a Country and City.

  7. Enter a Website or web Domain that is associated with the account owner.

  8. Click Create.

    The New Sub Account window closes. The new sub-account appears on the Manage Accounts page.

  1. On the top toolbar, click > Manage Accounts.

  2. Select a child account.

  3. Click Edit.

    The Edit Account window opens.

  4. Edit the values for relevant fields.

  5. Click Apply to save changes.

  1. From the top toolbar, click > Manage Accounts.

  2. Select a child account.

  3. Click the Delete option on the top menu.

    A pop-up window opens: "Are you sure you want to delete [X]?"

  4. Click Delete to confirm.

In some scenarios, it is not possible to delete a child account:

  1. The child account itself has its child accounts. If an attempt is made to delete such an account, the admin receives this error message: "You cannot delete [X] parent because there are sub-accounts assigned to it. Delete them or assign them to another account first and then try again."

  2. An account with a paid, active license. If an attempt is made to delete such an account, the admin receives this error message: "You cannot delete [X] child as it is attached to a User CenterClosed The Check Point User Center offers Single Sign-On (SSO) management for all your Check Point needs: (1) Manage Accounts & Products (2) Get Support Offers (3) License Products (4) Open & manage your Service Requests (5) Access Downloads and product documentation (6) Search Technical Knowledge Center account with active contracts. Detach them before removing this account."

Site License Distribution

Site License allows a parent account (such as a large organization or service provider) to centrally manage User Center licenses and distribute them to direct child accounts in the Check Point Infinity Portal. This feature helps you:

  • Allocate unused license seats to child accounts.

  • Streamline license management.

  • Reduce manual support intervention.

Important - Site License applies only to direct child accounts, not sub-children.

Supported Licenses

  • Supported: Harmony Email & Collaboration subscription licenses.

  • Not supported: Other license types (for example, CloudGuard) remain with the parent account and are not distributed.

When the parent account enables Site License Distribution:

  • Unused seats from supported licenses are automatically made available to direct child accounts.

  • Child accounts see the licenses in their portal, marked as Site License and referencing the parent account’s User Center ID.

  • Parent accounts can view total license allocation and usage.

  • Child accounts see only their own usage and the source of the license.

Prerequisite

Before enabling a site license, confirm that your account is a parent account (Customer Parent or MSSPClosed Managed Security Service Provider (MSSP) - An managed security service provider (MSSP) provides outsourced monitoring and management of security devices and systems. Common services include managed firewall, intrusion detection, virtual private network, vulnerability scanning and anti-viral services.) in Infinity Portal.

  1. From the top toolbar, click > Manage Accounts.

  2. Select a child account.

  3. Click Edit Account.

    The Edit Account window opens.

  4. Scroll down to the Manage site license section and click the Enable site license toggle button.

  5. Click Apply.

Setting Authentication

An MSSP or Enterprise account administrator can reset the configuration of a 2FA authentication app (for example, Microsoft Authenticator) for a user of a child account. Reset the authentication app when a user gets a new phone or has a problem with the app. After the reset, if 2FA is required for account login, Check Point sends a 2FA authentication code in an SMS to the user's phone. Then, the user can log in to the Infinity Portal and create a new authenticator app configuration (see Configure an authentication app for 2FA).

Important - The reset does not change the user's phone number. To change the phone number for the user, see Verify your phone number.

  1. From the top toolbar, navigate to > Manage Accounts.

    The Manage Accounts tab opens.

  2. Select an account.

  3. Select the Administrators tab.

    The 2FA configured column of the table shows one of these 2FA configurations for each user:

    Icon

    2FA Configuration

    The user does not have 2FA configured.

    By app

    The user has 2FA configured with an authenticator app.

    By phone

    The user has 2FA configured with SMS.

    App and phone

    The user has 2FA configured with an authenticator app and with SMS.

  4. In the table, below the Action column, click the Reset 2FA icon for the applicable user.

  5. In the window that opens, click Reset.

    Warning - This action cannot be undone.

  1. Click Export > 2FA Report.

  2. Infinity Portal creates a compressed folder with CSV files, one file for each region.

    The CSV file shows the status of Two-Factor Authentication for each user on the current account and all its child accounts.

Viewing Service Status

You can see each service open for the account as an individual tag in the accounts table. To easily read the service status, refer to this color scheme:

Color

Tag

Description

Grey

The service is active; the contract is active.

Yellow

The service is active, but its contract is about to expire.

Red

The service requires activation, or the contract has expired.

Blue

 

The contract is pending approval.

  1. From the top toolbar, navigate to > Manage Accounts.

  2. Select one of the accounts. In the Services column, see the names of the services activated for the account.

  3. To switch to an account's service, click the required service name.

  4. In the Account Link window that opens, click Yes to open the service.

Viewing and Editing Sub-Account Details

You can view and edit sub-account details from a parent account. You can also view and edit sub-account details in the General section of the sub-account settings.

To view and edit sub-account details:

  1. From the top toolbar, navigate to > Manage Accounts.

  2. In the table, select an account name. If the account name does not appear, enter it in the search bar.

  3. Use the tabs on the bottom pane to view and edit these details:

To add or remove columns from the table:

  1. In the upper-left of the table, click the menu icon .

    The list of column names opens.

  2. Select columns to show in the table.

    Only the selected columns appear in the table.

To filter the table:

  1. From the top toolbar, click the filter icon.

    The Filters side panel opens.

  2. Apply or remove filters.

    Filters continue to apply after you close the Filters window. If one or more filters are applied, a green dot appears on the filter icon .