UCCX 7 and CUCM 6 integration security

Unanswered Question
May 10th, 2010
User Badges:

We have a UCCX 7 and CUCM 6 integretion. An LDAP integration with MS AD is also in place. We would like to provide the UCCX application staff with credentials that meet their needs rather than providing a CCM Administrator level of access. In terms of specific role definitions (i.e. 'Standard AXL API Access') as opposed to the built-in groups, what permissions should we assign to each of the following accounts?


1. UCCX Application administrator


2. UCCX JTAPI User


3. UCCX RMJTAPI User

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (3 ratings)
Loading.
Aaron Harrison Mon, 05/10/2010 - 12:31
User Badges:
  • Super Bronze, 10000 points or more
  • Community Spotlight Award,

    Member's Choice, May 2015

Hi


1) App Administrator - needs nothing except a standard end user account. No group memberships or special roles.

2) JTAPI user - leave it as UCCX configures it automatically.

3) RM - leave it as UCCX configures it automatically. I also use this account instead of 'telecaster' for the desktop services.


The only odd one that you haven't mentioned is the user for AXL. I create an app user with a custom group with just AXL API access, and set that in UCCX. It then creates what it needs.


Regards


Aaron


Please rate helpful posts..

kevin.r1.dwyer@... Tue, 05/11/2010 - 08:00
User Badges:

Thanks Aaron, that is exactly what I was looking for. Thanks as well for catching the AXL user. Just to confirm, There should be no need to give the UCCX install and config team CCMAdministrator access to CUCM, correct?

Aaron Harrison Tue, 05/11/2010 - 08:06
User Badges:
  • Super Bronze, 10000 points or more
  • Community Spotlight Award,

    Member's Choice, May 2015

Well - you asked about CRS admin - users with admin access to CRS don't need anything.


However a team responsible for installing and configuring UCCX are likely to need to access CCMAdmin to verify settings, configure end users, softkey templates etc.


If you are doing all that for them, then they should be able to install UCCX using just the AXL-able account you create for that purpose.


Aaron

Actions

This Discussion