Managing Access to My Account

You can control who has access to your account to protect your data. This article explains how you can approve or reject a request to access your account and manage who has access.

Overview

To safeguard your data, only those you have granted permission can access your account. If you are sent a request to access your account, an email is sent to admins who have access to the Access to My Account page, and a notification appears as a banner in the Cato Management Application (CMA).

A request includes:

Who is requesting access
The level of access
How long the access is for

On the Access to My Account page, you can track and manage who has access to your account at any time. If you identify any access that is unauthorized, unnecessary, or no longer relevant, you can take immediate action to revoke access and ensure your account remains secure.

Use Case - Providing Partner Access

Your company works with an SD WAN company that is an official Cato partner, and they need to verify that you have configured a Network Rule correctly. To view the relevant pages in the CMA, they send you a request for view access to the Network Rules page. The partner can only view your the settings in the page after you grant them access.

Managing Access to Your Account

You can approve or reject a request to access your account.

To manage access to your account:

From the navigation menu, click Account > Access To My Account.
Click on the request you want to review.
(Optional) Add an Internal note.
Approve or Reject the request.

Tracking Account Access Requests

On the Account > Access To My Account page, you can track all the requests to access your account and their status. The possible statuses are:

Status	Explanation
Active	Your account can be accessed by those included in the request.
Rejected	You have rejected the request, and your account cannot be accessed by those included in the request.
Pending	A new request that has not been approved or rejected. Your account cannot be access by those included in the request.
Expired	An active request that has passed its expiry date. Your account cannot be accessed by those included in the request.

Revoking Access

If you no longer want to provide access, you can revoke a request.

To revoke a request:

From the navigation menu, click Account > Access To My Account.
Click on the request you want to revoke.
Click Revoke access.
In the Revoke Access pop-up window, click Revoke.