What are two requirements to enable the MSSP feature on FortiSASE? (Choose two.)

To enable and operate the FortiSASE Managed Security Service Provider (MSSP) feature, two primary requirements must be met. First, the root account must have a FortiCloud Premium subscription (or be a qualified partner account), as this unlocks the necessary MSSP functionalities. Second, administrators who will manage the customer tenants must be created as Identity & Access Management (IAM) users within the root FortiCloud account. These IAM users are then assigned specific MSSP roles using Role-Based Access Control (RBAC) through the FortiCloud IAM portal, which grants them the permissions to access and manage the sub-accounts.

B: MSSP administrator accounts and their primary permissions are configured in the FortiCloud IAM portal, not directly within the FortiSASE portal itself.

D: FortiSASE is inherently a multi-tenant platform. You enable the MSSP program on your account to manage tenants, you do not enable multi-tenancy as a separate feature.

1. FortiSASE Administration Guide 23.3: In the "MSSP" section

under "Prerequisites

" the guide states

"To use the FortiSASE MSSP solution

you must have a FortiCloud Premium account." This directly supports option A.

2. FortiSASE Administration Guide 23.3: In the "MSSP" section

under "Workflow

" the guide details the process of configuring MSSP administrators: "You can add Identity & Access Management (IAM) users to the MSSP account and assign them to an IAM profile that allows them to access and manage sub accounts." This workflow

centered on the FortiCloud IAM portal and RBAC

directly supports option C.

3. FortiSASE Administration Guide 23.3: The "MSSP" section's introduction describes the architecture: "FortiSASE supports a multi-tenancy architecture that allows an MSSP to manage multiple customers." This shows multi-tenancy is an inherent characteristic

not a feature to be enabled

making option D incorrect.