Manage Accounts

Check Point works with Distributors and Managed Security ServiceClosed A Check Point service offering that helps customers with deployments or technical services for Check Point products. Providers (MSSPs). Most commonly, Check Point works directly with a Distributor that manages MSSPs in a region. MSSPs sell Check Point services to customers and manage customer accounts.

The Manage Accounts page appears only in Infinity Portal accounts of type MSSP and Distributor.

To open the Manage Accounts page, from the top toolbar navigate to > Manage Accounts.

The Manage Accounts page contains a list of all child accounts associated with the current account. It includes:

  1. In the upper-left of the table, click the hamburger button .

    A popup window opens.

  2. Select columns to show in the table.

    Only the selected columns appear in the table.

  1. From the top MSSPClosed Managed Security Service Provider (MSSP) - An managed security service provider (MSSP) provides outsourced monitoring and management of security devices and systems. Common services include managed firewall, intrusion detection, virtual private network, vulnerability scanning and anti-viral services. toolbar, click the filter icon.

    The Filters window opens.

  2. Apply or remove filters.

    Filters continue to apply after you close the Filters window. If one or more filters is applied, a green dot appears on the filter icon .

How to Manage Accounts

You can create a new account inside of a current account as its child account. The child account inherits users from the parent account based on group inheritance settings. To configure group inheritance settings, see User Groups.

To navigate from a child account to its parent account, from the top toolbar click the arrow icon .

  1. From the top toolbar, click > Manage Accounts.

  2. Click the arrow button next to New and select the type of account you want to create.

    Note - You can click New to create an account of the default type. The default type depends on the type of your account.

    If your account is of type MSSP, the New button creates an account of type Customer.

    If your account is of type Distributor, the New button creates an account of type MSSP.

    The New Account window opens.

  3. Enter an Account Name.

  4. Select an Account Type.

  5. Select a Parent Account.

    Note - By default, when you create a child account, the parent account is the account that is currently open. If this account has child accounts of type MSSP, you can select one of these accounts to be the Parent Account.

  6. Select a Data Residency.

    Note - Availability of data residencies depends on the data residency of the parent account.

  7. Select a Country.

  8. Enter a Website or web Domain that is associated with the account owner.

  9. Optional - To allow a child account of type MSSP to sell Pay-As-You-Go-Services (PAYG), set Enable Payg Contracts to ON. For more information, see Pay-As-You-Go (PAYG) Services.

  10. Optional - Select one or more Optional services to start as a trial for the new account.

  11. Click Create.

    The New Account window closes. The new child account appears in the table.

  1. From the top toolbar, click > Manage Accounts.

  2. Select a child account.

  3. Click Edit.

    The Edit Account window opens.

  4. Edit the values for relevant fields.

  5. Click Apply to save changes.

  1. From the top toolbar, click > Manage Accounts.

  2. Select a child account.

  3. Click the Delete option in the top menu.

    A pop-up window opens: "Are you sure you want to delete [X]?"

  4. Click Delete to confirm.

In some scenarios, it is not possible to delete a child account:

  1. The child account itself has its child accounts. If an attempt is made to delete such an account, the admin receives this error message: "You cannot delete [X] parent because there are sub-accounts assigned to it. Delete them or assign them to another account first, and then try again."

  2. An account with a paid, active license. If an attempt is made to delete such an account, the admin receives this error message: "You cannot delete [X] child as it is attached to a User CenterClosed The Check Point User Center offers Single Sign-On (SSO) management for all your Check Point needs: (1) Manage Accounts & Products (2) Get Support Offers (3) License Products (4) Open & manage your Service Requests (5) Access Downloads and product documentation (6) Search Technical Knowledge Center account with active contracts. Detach them before removing this account."

  1. From the top toolbar, click > Manage Accounts.

    The Manage Accounts tab opens.

  2. In the Manage Accounts tab > top taskbar, click Export > All Accounts.

    The Infinity Portal creates a compressed folder with CSV files, one file for each region. The CSV file contains details for the current account and all of its child accounts.

An MSSP account administrator can reset the configuration of a 2FA authentication app (example: Microsoft Authenticator) for a user of a child account. Reset the authentication app when a user gets a new phone or has a problem with the app. After the reset, if 2FA is required for account login, Check Point sends a 2FA authentication code in an SMS to the user's phone.Then, the user can log in to the Infinity Portal and create a new authenticator app configuration (see To reset a Two-Factor Authentication (2FA) Authentication App for a user of a child account).

Important - The reset does not change the phone number for the user. To change the phone number for the user, see To reset a Two-Factor Authentication (2FA) Authentication App for a user of a child account.

  1. From the top toolbar, navigate to > Manage Accounts.

    The Manage Accounts tab opens.

  2. Select an account.

  3. Select the Administrators tab.

    The 2FA configured column of the table shows one of these 2FA configurations for each user:

    Icon

    2FA Configuration

    The user does not have 2FA configured.

    By app

    The user has 2FA configured with an authenticator app.

    By phone

    The user has 2FA configured with SMS.

    App and phone

    The user has 2FA configured with an authenticator app and with SMS.

  4. In the table, below the Action column, click the Reset 2FA icon for the applicable user.

  5. In the window that opens, click Reset.

    Warning - This action cannot be undone.

  1. Click Export > 2FA Report.

  2. Infinity Portal creates a compressed folder with CSV files, one file for each region.

    The CSV file shows the status of Two-Factor Authentication for each user on the current account and all its child accounts.

Viewing and Editing Child Account Details

You can view and edit child account details from a parent account. You can also view and edit child account details in the General section of the child account tenant.

  1. From the top toolbar, navigate to > Manage Accounts.

    The Manage Accounts tab opens.

  2. In the table, below the Name column, select an account name. If the account name does not appear, enter it in the search bar.

View and edit child account details:

This tab shows information about Infinity Portal services and contracts associated with the child account.

Field

Description

Contracts Status

Shows if the contract is active, about to expire, or expired.

Service Status

Shows if the service is active. For more information, see Services & Contracts.

Service name

Shows the Infinity Portal's name for the service.

Contract type

Shows if the contract is Trial, Eval, Annual Subscription, or Pay-As-You-Go.

Package (SKU)

Shows the SKU of each license.

Quantity

Shows the number of units defined in the contract. Units are defined differently for each Infinity Portal service.

Registration Date

Shows the date on which the license was assigned to the account.

Expires on

Shows the date on which the contract is set to expire.

Contract ID

Shows the internal ID number for the contract.

User Center ID

Shows the User Center ID of the account that purchased the contract.

Sync UC

If the account is linked with a User Center account, you can click a button in this column to sync the account with the User Center immediately.

Archived Contracts

This tab shows usage information for the child account and all of its child accounts. To see usage data for a month, select the month from the dropdown menu. If you select the current month, usage data is not final.

Field

Description

Account Name

Name of the Infinity Portal account.

Service Name

Name of a service associated with the Infinity Portal account.

Past Day Usage

Total usage on the previous day. Units are defined differently for each service.

Monthly Usage

Sum of usage units divided by the number of days in the month. Units are defined differently for each service.

Yearly Subscriptions

Number of yearly subscriptions purchased for the service.

Monthly Pay-As-You-Go

Number of service units used during the month on a PAYG contract.

To export a usage report:

  1. Above the table, on the right, click Export.

  2. Select a usage report.

    Your web browser downloads a zipped file.

  3. Unzip the file and view the report.

This tab shows information about administrators of the child account. For more information, see Users and User Groups.

Field

Description

Account ID

The Account ID field contains a unique ID for this account, which the Customer support or Sales staff request to troubleshoot incidents or enable a feature.

Unique Login URL

The URL that users of the child account use to access Infinite Portal.

Parent Account Name

The name of the parent account.

Registration Date

The date when the account was initially registered in the Infinity Portal.

Data Residency

The geographic region where your organizational data is stored. You can select the region only when you create an Infinity Portal account. For more information, see How to Create an Account.

The Primary Contact section shows the email address of the primary administrator who functions as a focal point for all future correspondence with Check Point. If the child account has more than one primary administrator, you can change the Primary Contact.

To change the Primary Contact:

  1. Select the administrator from the drop-down menu.

  2. Click Save.

Add or Edit a Personalization (Description) of the Child Account

In the Personalization section, you can add a description in the text box. The description appears in the table above when you hover over the "i" icon () in the child account name cell.

To add or edit the description:

  1. Enter text in the text box.

  2. Click Save.

Note - To change between accounts, it is necessary to have the account type called “Partner”.

  1. From the top toolbar, navigate to > Manage Accounts.

    The Manage Accounts tab opens.

  2. Hover over the arrow icon to the right of the account's name that you want to see.
    If the account's name does not show, enter its name in the search bar.

  3. In the Account Link window that opens, click Yes to change accounts.

  1. From the top toolbar, navigate to > Manage Accounts.

    The Manage Accounts tab opens.

  2. Click the account's name.
    The Services & Contracts tab opens and shows all services and contracts registered to the account.

  3. To see an account's service, click Go to app.

  4. In the Account Link window that opens, click Yes to open the service.

You can add a logo to appear in the upper-right corner of the Infinity Portal. By default, a child account inherits the logo from its parent account. You can configure a different logo for a child account.

Example - Account A is the parent of Account B. Account B is the parent of Account C. By default, Account B inherits the logo from Account A.. By default, Account C inherits the logo from Account B. If you set a new logo for Account B, then by default, Account C inherits the new logo from Account B.

This video shows how to upload and manage logos for a parent account and child accounts:

Watch the Video

 

  1. From the top toolbar, navigate to > Manage Accounts.

  2. In the table, select an account.

  3. In the General tab > Personalization section, open the Logo menu.

  4. Select one of these options:

    • Use inherited logo - If the account is a child account, it inherits the logo from its parent account. If the account is not a child account, it is not possible to configure this option.

    • Set your own logo - Upload an image file that meets the listed requirements.

  5. Click Save.

  1. From the top toolbar, navigate to > Manage Accounts.

  2. In the table, select a parent account that is not a child account.

  3. In the General tab > Personalization section, open the Logo menu.

  4. Click the trash can button.

  5. Click Save.

Managing Subscription Contracts for a Child Account

A customer with a subscription contract pays for a specific number of users to use an Infinity Portal service. An administrator of an MSSP account can add a subscription contract to a child account.

Prerequisite

You must use the Check Point User Center to purchase subscription contracts. For detailed instructions on how to create a User Center account, see sk22716, or log in to the User Center.

  1. From the top toolbar, click > Manage Accounts.

  2. Select a child account.

  3. In the bottom table, open the Services & Contracts tab..

  4. Click Link paid subscription.

    The Manage Accounts window opens.

  5. Click Attach Account.

    The Attach Account wizard opens.

  6. In the Login to User Center step:

    1. Enter the email address and password for the User Center account.

      Note - If your User Center profile does not contain contracts for an Infinity Portal service, you must purchase the contract and attach it to the User Center account. For more information, see Purchase a License.
    2. Click Next.

  7. In the Select Accounts step:

    1. Select one or more User Center accounts to link to the child account.

    2. Click Finish.

      The annual subscriptions from the selected User Center account(s) appear in the Services & Contracts tab.

  1. From the top toolbar, navigate to > Manage Accounts.

  2. In the table, select an account.

  3. In the Services & Contracts tab, select an annual product subscription..

  4. Click Link paid subscription.

    The Manage Accounts window opens.

  5. In the table row that contains the subscription > Remove column, click Delete .

  6. In the confirmation window, click Yes.

Managing PAYG Contracts for a Child Account

An administrator of an MSSP or Distributor account can add a Pay-As-You-GO (PAYG) contract to a child account. PAYG units are defined differently for each Infinity Portal service. An administrator of an MSSP or Distributor account can add a PAYG contract to a child account.

Prerequisite

Get permission from Check Point to sell PAYG services for one or more Infinity Portal services.

  1. From the top toolbar, navigate to > Manage Accounts.

  2. In the table, select an account.

  3. In the Services & Contracts tab, click Add Contract.

    The Add Contract window opens.

  4. Select a Package (SKU).

  5. Click Add Contract.

  1. From the top toolbar, navigate to > Manage Accounts.

  2. In the table, select an account.

  3. In the Services & Contracts tab, select a PAYG contract.

  4. Click Edit contract.

    The Edit contract window opens.

  5. Edit the contract.

  6. Click Apply Changes.

  1. From the top toolbar, navigate to > Manage Accounts.

  2. In the table, select an account.

  3. In the Services & Contracts tab, select a PAYG contract in the table.

  4. From the toolbar above the table, click Cancel contract.

  5. In the confirmation window, click Apply.

Archiving Pay-As-You-Go (PAYG) Contracts for a Child Account

When you remove a contract, a customer stops receiving Check Point services related to the contract immediately. Archived contracts appear in the Manage Accounts > Services & Contracts tab only when Show archived contracts is selected. By default, an expired contract is archived 30 days after the expiration date.

You cannot undo this action.

  1. From the top toolbar, navigate to > Manage Accounts.

  2. In the table, select an account.

  3. In the Services & Contracts tab, select an expired PAYG contract.

  4. Click Archive contract.

Above the table, select the checkbox Show archived contracts to show the contracts. Clear the checkbox to hide the contracts.