General Management

Objective
Prerequisites
Configure Tenant Settings
Configure User Personal Settings
Enable Tenant Access Restriction
Concepts
API References

Objective

This guide provides instructions on how to manage general settings for your tenant, and personal account settings in F5® Distributed Cloud Services. The tenant-level settings allow you to control user access, and define policies around it and user-level personal account settings allow you to configure settings such as notification preferences, Multi-Factor Authentication (MFA), etc. To know more information about supported user access management, see User Access Management.

Using the instructions provided in this guide, you can configure tenant policies such as password policy and personal settings such as MFA and notification preferences.

Prerequisites

The following prerequisites apply:

Account

Note: If you do not have an account, see Create an Account.

Tenant settings such as Login Options require the Tenant Owner role.

Note: See Access Policies and Rules for more information.

Configure Tenant Settings

The information provided in this chapter covers tenant-level settings, and some of these settings may require you to have the Tenant Owner role.

Step 1: Log into F5 Distributed Cloud Console, go to tenant settings.

Open F5 Distributed Cloud Console > select Administration box.

Note: Homepage is role based, and your homepage may look different due to your role customization. Select All Services drop-down menu to discover all options. Customize Settings: Administration > Personal Management > My Account > Edit work domain & skills button > Advanced box > check Work Domain boxes > Save changes button.

Note: Confirm Namespace feature is in correct namespace, drop-down selector located in upper-left corner. Not available in all services.

Select Tenant Settings in left-menu > select Tenant Overview.

Note: If options are not showing available, select Show link in Advanced nav options visible in bottom left corner. If needed, select Hide to minimize options from Advanced nav options mode.

USERMANAGE 1 2 2 — Figure: Tenant Settings Page

Step 2: Configure custom logo.

Select Change Logo in Custom Logo section to load custom logo form.

Select Upload Image, and upload image for your logo.

Note: Ensure that the image complies with the requirement displayed on the form.

USERMANAG CUSTOMLOGO6 2 — Figure: Custom Logo

Select Save.

Step 3: Configure expiry policy for credentials.

Select Setup Expiration Preferences in Credential Expiry Policy section to load the expiry configuration form.

Enter maximum expiry duration in number of days for your API certificate, kubeconfig, and API token in boxes.

USERMANAG EXPIRYPOLICY4 4 — Figure: Set Credentials Expiry

Select Save.

Note: The default expiry is 90 days. See Credentials guide for information on how to create credentials.

Step 4: Set tenant policies.

Select Setup Policies in Tenant Configuration section to load tenant policy configuration form.

Enter Display Name for your tenant in the basic configuration section.

Note: This name gets displayed in the tenant login screen.

Enter value in Brute Force Detection Settings box in Max Login Failures box.

Note: When the number of login failures reaches the set limit, user is temporarily locked for a maximum duration of 15 minutes.

USERMANAG TENANTCONFIG2 2 — Figure: Basic and Bruteforce Detection Settings

In Password Policy section:
- Min Number Of Digits: Enter value in box to specify minimum number of required digits in password.
- Min Number Of Lowercase Characters: Enter value in box to specify minimum number of lower case characters in the password.
- Min Number Of Uppercase Characters: Enter value in box to specify minimum number of upper case characters in the password.
- Min Number Of Special Characters: Enter value in box to specify minimum number of special characters in the password.
Note: Special characters are characters such as ?!#%$.
- Check Not Username box to ensure password is not the same as username.
- Expire Password: Enter value to set a password expiry time period.
- Not Recently Used: Enter value to restrict the user from using a number of previously used passwords when changing password.
- Minimum Length: Enter value to specify minimum length for the password length (string).

USERMANAG TENANTCONFIG2 4 — Figure: Tenant Password Policy Settings

Select Save and Exit button.

Step 5: Set Support Access.

Allowing F5 support access, adding read write access to all namespaces, within customer tenants results in faster resolution times as the support team can access configurations, directly observe the issue, identify the cause, and troubleshoot issues more efficiently. Granting access leads to faster resolution times.

Select Administration box in F5 Distributed Cloud home page.
Select Tenant Overview in Tenant Settings section.
Select Manage Access button in Support Access section.

USERSUPPORTACCESS — Figure: Support Access

Select Access Level drop-down menu.

USERSUPPORTACCESSFORM — Figure: Support Access Form

Read Only All: Allows support personnel to view, but not modify, all namespaces in customer tenant.
Read Write All (default setting): Allows support personnel to view and modify all namespaces in customer tenant.
Read Write Specific Namespaces: Allows support personnel to view and modify specific namespaces in customer tenant.
- Select Namespaces drop-down menu.
- Select + Add Item button to add additional Namespaces options.
Check Pause Access if needed.

Note: Allows for temporary suspension of support access to a customer tenant.

SUPPORTACCESSLEVELS — Figure: Support Access Form

Select Save and Exit button.

Step 6: Delete tenant.

In case you wish to delete the tenant, do the following:

Select Request Deletion on the Tenant Information section to load the tenant deletion request form.
Select an option from the drop-down list for the Please choose a reason for tenant deletion box.
Optionally, enter additional feedback in the Please provide additional feedback below (optional) box.
Type Delete in the Please type 'Delete' for confirmation field, and select Request tenant deletion and log out button.

Configure User Personal Settings

Perform the following to configure your personal settings. Personal settings are for individual users, and consists of configurations such as Two-factor authentication, passwords, profile pictures, and notification preferences.

Log into F5 Distributed Cloud Console and do the following:

Step 1: Navigate to user settings.

Open F5® Distributed Cloud Console > select Administration box.

Select Personal Management in left-menu > select My Account.

USERMANAGE PERSONAL 1 2 — Figure: My Account Page

Step 2: Set a profile picture.

Select on the camera icon displayed under the Personal Settings section.
Select Upload Image to upload image for your profile.

Note: Ensure that the image complies with the requirement displayed on the form.

Select Save button.

Step 3: Configure two-factor authentication.

Select Enable two-factor authentication in the Two-factor authentication section. Wait for the display to indicate that it is Enabling.

Note: You can use FREEOTP, Google Authenticator, or your prefered application for two-factor authentication.

USERMANAG TFA ENABLED — Figure: Two-factor authentication

Log out and log in to Set up two-factor authentication.
- Install FreeOTP or Google Authenticator applications on your mobile and scan the barcode.
- Enter one-time code in box.
- Select Submit button.

Note: You can use the Disable two-factor authentication option in the Two-factor authentication section to disable the authentication anytime.

Step 4: Change password.

Select Change Password in the Password section to update your password.
This will result in an email to the email address associated with the tenant.
Follow the instructions in the email to update your password.

Step 5: Set notification preferences.

Select Manage Notification Preferences in Notification Preferences section.
Specify notifications you prefer to receive.

Enable Tenant Access Restriction

Set Tenant Access Restriction.

Open a support ticket specifying the access restriction by IP/ASN/Region. Once ticket is submitted, our support team provisions the access with restrictions in place.

Step 1: Log into F5 Distributed Cloud Console, open support ticket.

Open Administration box in Home page.

Note: If you do not see it in the common services, search for it using the search on the top of the Home page.

Select Requests in Support section.
Select + Add Request. This opens a new support request form.

Step 2: Fill the request information and create request.

Select Service drop-down menu.

Note: Select service you are requesting, Example: Web App & API Protection.

Select Type drop-down menu.
- Account Support
- Technical Support
- Incident Support
Select Other in Topic drop-down menu.
Select Priority.
- Normal, High, or Urgent options.
Enter subject in Please provide a subject for your issue box.
Enter details in Please explain the issue below box.
Specify Access Restrictions:
- IP
- ASN
- Region
Select Submit Request button.