--- title: Logging in as a Tenant Administrator slug: ps/help/en_us/nsa/22x/nsa-zta/ag/1001 docTags: createdAt: 2026-07-22T14:00:49.509Z --- - [Preparing to Login](docId\:qAQLPFWfOt_GYC0QQw64z) - [Logging into the Controller as a Tenant Admin](docId\:qAQLPFWfOt_GYC0QQw64z) - [Logging out of the Controller](docId\:qAQLPFWfOt_GYC0QQw64z) # Preparing to Login As a Tenant Admin, you can configure *Ivanti Neurons for Zero Trust Access* (*nZTA*) to support the Gateways, users, devices, policies and resources that are required for your organization’s *nZTA* implementation. To log into the *Controller*, you require a Tenant Admin login. All Tenant Admin accounts are set up by the *Ivanti* DevOps team. Once your Tenant Admin account has been created, you will receive an email which describes how to log into the *Controller* as a Tenant Admin. You can then proceed to login to the *Controller*, see [Logging into the Controller as a Tenant Admin](docId\:qAQLPFWfOt_GYC0QQw64z). # Logging into the *Controller* as a Tenant Admin Before you can log in as a Tenant Admin, you will receive an email from the *Ivanti* DevOps team. This email contains: - Your Tenant Admin user name. - Your password. - The *nZTA* domain. That is, the FQDN of the *Controller*. - A hyperlink to start the login process. To log into your Tenant Admin account: 1. Click the hyperlink in your email. The administrator login page appears. ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/0RrRFGQRgMNs9CaTmBChz_loginadmin.png" alt="Tenant Admin Login Page" position="flex-start" size="80" width="1054" height="469" initialPath="img/login_admin.png" githubPath="img/login_admin.png" showCaption="false"} :::Paragraph{indent="1"} Tenant Admin Login Page ::: Log in using your supplied Tenant Admin credentials. The following default timeouts are used for all Admin sessions: :::Paragraph{listStyleType="disc" indent="2"} The idle timeout is 10 minutes. ::: :::Paragraph{listStyleType="disc" indent="2"} The session timeout is 60 minutes. ::: To configure Admin session timeout values, see [Configuring Session Timeouts](docId\:qAQLPFWfOt_GYC0QQw64z). 3. If *nZTA* requests it, specify a new password for your account. :::Paragraph{indent="1"} Once this procedure is complete, you access the *nZTA* graphical interface as an admin user. ::: The graphical user elements that appear depend on your configured state. - When you log in for the first time, and until *nZTA* is minimally configured, a **Welcome** dialog appears, which leads to the **Secure Access Setup** (Onboarding) wizard. See [Working with the Onboarding Wizard](docId\:qAQLPFWfOt_GYC0QQw64z). - When you log into a configured system, the *nZTA* **Network Overview** page appears, see [Viewing the nZTA Network Overview](docId\:qAQLPFWfOt_GYC0QQw64z). :::hint{type="info"} To reset a forgotten password, click **FORGOT PASSWORD**. This link presents a credentials form through which you enter a Username and Email address. If the entered credentials match a registered administrator account, *nZTA* emails a password reset link to the entered address allowing the recipient to create a new password. ::: ## Viewing the *nZTA* Network Overview After you log in to the Tenant Admin Portal following successful completion of the *Onboarding Wizard*, *nZTA* displays the **Network Overview** page. This page provides an overview of user and service activity across your enterprise. ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/4E4gwRojaOA3qRjb9FXqE_dashboardmap.png" position="flex-start" size="80" width="1231" height="996" initialPath="img/dashboardmap.png" githubPath="img/dashboardmap.png" showCaption="false"} The Network Overview Page :::hint{type="info" indent="1"} To return to this page any time, click the **Insights** menu icon in the *nZTA* menu and select **Overview**. Alternatively, click the banner at the top. ::: From this page, you can view and configure all functions and capabilities allowed through your subscription and role. Using the *nZTA* menu at the left-hand side, choose from: - The **Show/Hide** menu icon, providing the ability to show or collapse the *nZTA* menu tree: ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/lbYgdtL2AkgrQqUBvBS2J_menuiconmenu.png" alt="Showing or hiding the nZTA menu system" position="flex-start" size="10" width="30" height="28" initialPath="img/menu_icon_menu.png" githubPath="img/menu_icon_menu.png" showCaption="false"} Showing or hiding the *nZTA* menu system - The **Insights** menu icon, providing access to the analytics and monitoring components of the *nZTA* portal: ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/c7VF0tw7Maa4h8kor_EIU_menuiconinsights.png" alt="Accessing the Insight menu" position="flex-start" size="10" width="30" height="22" initialPath="img/menu_icon_insights.png" githubPath="img/menu_icon_insights.png" showCaption="false"} Accessing the Insight menu To learn more about the functionality offered by this menu, see [Using the Insights Menu to Monitor User Activity and Service Usage](docId:9pR-GUBlUQ_Ko0B6yMLkA). - The **Secure Access** menu icon, providing access to configure the individual components that comprise your *Secure Access Policies*: ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/aMoXRup1CBT-jpfWEmazA_menuiconsecureaccess.png" alt="Accessing the Secure Access menu" position="flex-start" size="10" width="27" height="27" initialPath="img/menu_icon_secureaccess.png" githubPath="img/menu_icon_secureaccess.png" showCaption="false"} Accessing the Secure Access menu - The **Administration** menu icon, providing access to administrative functions related to your *nZTA* subscription: ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/ul5e4hpEWOXzrdOBsKo5d_menuiconadmin.png" position="flex-start" size="10" width="30" height="27" initialPath="img/menu_icon_admin.png" githubPath="img/menu_icon_admin.png" showCaption="false" indent="1"} :::Paragraph{indent="1"} Accessing the Administration menu ::: The chapters in this guide cover each of these functions in detail. ## Changing the UI Theme *nZTA* offers two themes for your UI display: - Light theme: ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/SwPmMswnI-zDaUUOrxqq7_dashboardmaplighttheme.png" alt="The Network Overview Page - light theme" position="flex-start" size="80" width="1231" height="996" initialPath="img/dashboardmap_lighttheme.png" githubPath="img/dashboardmap_lighttheme.png" showCaption="false"} The Network Overview Page - light theme - Dark theme: ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/4a60neqFLsDVICF-IHnD2_dashboardmapdarktheme.png" position="flex-start" size="80" width="1235" height="1049" initialPath="img/dashboardmap_darktheme.png" githubPath="img/dashboardmap_darktheme.png" showCaption="false"} :::Paragraph{indent="1"} The Network Overview Page - dark theme ::: To change the current theme, which remains in place through subsequent logins, use the **Settings** menu: ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/vuKvqmCCPOw5paH3QztZw_themechange.png" position="flex-start" size="41" width="405" height="548" initialPath="img/themechange.png" githubPath="img/themechange.png" showCaption="false"} :::Paragraph{indent="1"} Changing the UI theme ::: Through the **Color Scheme** panel (indicated), click **Light** or **Dark** to switch between themes. ## Setting the Timezone To configure the default timezone for this admin login account, use the **Settings** menu: ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/a9mLr4zt7NTIxzg1WjOCP_timezone.png" position="flex-start" size="40" width="404" height="552" initialPath="img/timezone.png" githubPath="img/timezone.png" showCaption="false"} :::Paragraph{indent="1"} Configuring the default timezone ::: Choose a timezone in the provided drop-down selector, then click **Apply**. The configured timezone affects the display of data on all **Insights** pages, and each admin login account within a tenant deployment has their own specific timezone configuration. Changes to the timezone persist across login sessions, and the default setting is *UTC (Coordinated Universal Time)*. The current timezone can be observed through the date-time selector at the top of each **Insights** page. :::hint{type="info" indent="1"} Changing the timezone can affect the data displayed in each chart or graph. For example, a recently-observed non-compliance event involving a client device in the GMT timezone that appears in the *Last Hour* view (when using GMT (UTC + 00:00) as your configured timezone) might then only appear in the *Last X Hours* view when you switch your timezone to IST (UTC+05:30). ::: ## Configuring Session Timeouts To configure timeout values for admin and user sessions, use the **Settings** menu: ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/g6MwlzsfQ-tIIVfuWLDhI_timeouts.png" position="flex-start" size="41" width="409" height="864" initialPath="img/timeouts.png" githubPath="img/timeouts.png" showCaption="false"} :::Paragraph{indent="1"} Configuring timeout values for admin and user sessions ::: Through the **Session Settings** panel (indicated), you can set the following timeout values: - **Admin Idle Timeout**: the time, in minutes, after which the admin login session to the Tenant Admin Portal times out due to inactivity. (default: 10) - **Admin Max Session Length**: the time, in minutes, after which the admin login session to the Tenant Admin Portal ends and must be re-authenticated. (default: 60) - **User Idle Timeout**: the time, in minutes, after which the user login session to *nZTA* times out due to inactivity. (default: 60) - **User Max Session Length**: the time, in minutes, after which the login session to *nZTA* ends and must be re-authenticated. (default: 720) To apply your changes, click **APPLY**. :::hint{type="info"} To use these settings, your configured *nZTA Gateway*s must all meet minimum version requirements for session control. *nZTA* disables the panel and displays a warning message if this is not the case. ::: :::hint{type="info"} To learn more about user sessions and the effect of configured timeouts, see [Using Ivanti Secure Access Client with nZTA](docId\:LOWTLfGQBiadNKrcw9BlV). ::: ## Resetting All Filters and Selections Each page in the *Insights* menu allows data filtering, enabling you to observe and monitor only the analytics and log data you want. Each filter or selection feature includes its own *reset to default value* option. To learn more about the *Insights* menu and the analytics capabilities of *nZTA*, see [Using the Insights Menu to Monitor User Activity and Service Usage](docId:9pR-GUBlUQ_Ko0B6yMLkA). Should you want to reset all filters and data selection criteria across the Tenant Admin Portal in one go, use the **Settings** menu: ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/9xdeM6fUf_FXCJ6M0cxsT_globalfilterreset.png" position="flex-start" size="40" width="404" height="254" initialPath="img/globalfilterreset.png" githubPath="img/globalfilterreset.png" showCaption="false"} :::Paragraph{indent="1"} Resetting all filters and data selection criteria across the Tenant Admin Portal ::: Through the **Filter Reset** panel, you can remove all filters and data selection criteria immediately, returning each page to its default view. Each admin user stores filters and selections separately, so this function affects the current user only. To activate, enable **Set Filters to default**, then select **APPLY**. # Logging out of the *Controller* To log out of the *nZTA* Tenant Admin Portal and end the current session, click the *Profile* icon and select **Logout**. ::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/MyjqNMHWURkD0dbJ-pXYO_logoutadmin.png" position="flex-start" size="24" width="240" height="136" initialPath="img/logout_admin.png" githubPath="img/logout_admin.png" showCaption="false"}