User rigths administration in the Cisco Call Manager 7.0?

Answered Question
Jun 20th, 2010

Hi,

I would like to create a customized user account that has administrator access to

     ”Cisco Unified Serviceability”

     ”Cisco Unified CM Administration”

     ”Cisco Unified Reporting”

     ”Cisco Unified OS Administration”

     ”Katastrofe genoprettelsessystem” (Catastrophic Recovery)

I have created a new end-user (adminbcms) and assigned the following "Groups" under the "Permissions Information" in the Call-Manager:

"Admin"

"PhoneAdministration"

"Standard CCM Admin Users"

"Standard CCM End Users"

"Standard CCM Super Users"

But with this permissions I only have permissions to logon to:

     ”Cisco Unified Serviceability”

     ”Cisco Unified CM Administration”

     ”Cisco Unified Reporting”

I can not logon to the:

     ”Cisco Unified OS Administration”

     ”Katastrofe genoprettelsessystem” (Catastrophic Recovery)

In the "Find and List Roles", I have the following roles I can assign to the end-users:

NameApplicationDescription
AdminFUCisco Call Manager AdministrationAdminFU
AdminFUCisco Call Manager ServiceabilityAdminFU
AdminROAdminRO
FGServiceOgSupportFUCisco Call Manager AdministrationFGServiceOgSupportFU
FGServiceOgSupportROFGServiceOgSupportRO
Silkeborg HelpdeskCisco Call Manager AdministrationSilkeborg Helpdesk
Standard AXL API AccessCisco Call Manager AXL DatabaseAccess the AXL APIs
Standard Admin Rep Tool AdminAdminister CAR
Standard CCM Admin UsersAll users with access to CCM web site
Standard CCM End UsersAccess to CCM User Option Pages
Standard CCM Feature ManagementCisco Call Manager AdministrationStandard CCM Feature Management
Standard CCM Gateway ManagementCisco Call Manager AdministrationStandard CCM Gateway Management
Standard CCM Phone ManagementCisco Call Manager AdministrationStandard CCM Phone Management
Standard CCM Route Plan ManagementCisco Call Manager AdministrationStandard CCM Route Plan Management
Standard CCM Service ManagementCisco Call Manager AdministrationStandard CCM Service Management
Standard CCM System ManagementCisco Call Manager AdministrationStandard CCM System Management
Standard CCM User ManagementCisco Call Manager AdministrationStandard CCM User Management
Standard CCM User Privilege ManagementCisco Call Manager AdministrationStandard CCM User Privilege Management
Standard CCMADMIN AdministrationCisco Call Manager AdministrationAdminister all aspects of CCMAdmin system
Standard CCMADMIN AdministrationCisco Call Manager Dialed Number AnalyserAdminister all aspects of CCMAdmin system
Standard CCMADMIN Read OnlyCisco Call Manager AdministrationRead access to all CCMAdmin resources
Standard CCMADMIN Read OnlyCisco Call Manager Dialed Number AnalyserRead access to all CCMAdmin resources
Standard CCMUSER AdministrationCisco Call Manager End UserAdminister all aspects of CCMUser system
Standard CTI Allow Call MonitoringCisco Computer Telephone Interface (CTI)Allow monitoring of calls
Standard CTI Allow Call Park MonitoringCisco Computer Telephone Interface (CTI)Allow monitoring of call park DNs
Standard CTI Allow Call RecordingCisco Computer Telephone Interface (CTI)Allow recording of calls
Standard CTI Allow Calling Number ModificationCisco Computer Telephone Interface (CTI)Allow calling number modification
Standard CTI Allow Control of All DevicesCisco Computer Telephone Interface (CTI)Allow control of all CTI controllable devices
Standard CTI Allow Reception of SRTP Key MaterialCisco Computer Telephone Interface (CTI)Allows access to SRTP key material
Standard CTI EnabledCisco Computer Telephone Interface (CTI)Enable CTI application control
Standard CTI Secure ConnectionCisco Computer Telephone Interface (CTI)Application connection to CTI/CM must be secure
Standard CUReportingCisco Unified ReportingAllows application users to generate reports from various sources
Standard EM Authentication Proxy RightsCisco Extension MobilityManages EM Authentication Rights
Standard FeatureFUCisco Call Manager AdministrationStandard FeatureFU
Standard FeatureROCisco Call Manager AdministrationStandard FeatureRO
Standard GatewayFUCisco Call Manager AdministrationStandard GatewayFU
Standard GatewayROCisco Call Manager AdministrationStandard GatewayRO
Standard Packet SniffingCisco Call Manager AdministrationAccess to CCM Pages for Enabling Sniffing
Standard PhoneFUCisco Call Manager AdministrationStandard PhoneFU
Standard PhoneROCisco Call Manager AdministrationStandard PhoneRO
Standard PluginFUCisco Call Manager AdministrationStandard PluginFU
Standard PluginROCisco Call Manager AdministrationStandard PluginRO
Standard RealtimeAndTraceCollectionCisco Call Manager ServiceabilityRealtime and Trace Collection
Standard RoutePlanFUCisco Call Manager AdministrationStandard RoutePlanFU
Standard RoutePlanROCisco Call Manager AdministrationStandard RoutePlanRO
Standard SERVICEABILITYCisco Call Manager ServiceabilityStandard Serviceability
Standard SERVICEABILITY AdministrationCisco Call Manager AdministrationAdminister all aspects of Serviceability system
Standard SERVICEABILITY AdministrationCisco Call Manager Dialed Number AnalyserAdminister all aspects of Serviceability system
Standard SERVICEABILITY AdministrationCisco Call Manager ServiceabilityAdminister all aspects of Serviceability system
Standard SERVICEABILITY Read OnlyCisco Call Manager Dialed Number AnalyserRead access to all Serviceability resources

But as far as I can see, none of the above "Roles" gives the access to the pages ”Cisco Unified OS Administration” or ”Katastrofe genoprettelsessystem” (Catastrophic Recovery).

Is it not possible to assign rights to an end user so it is possible to acces these 2 pages?

Kind regards,

Carl-Marius

I have this problem too.
0 votes
Correct Answer by William Bell about 3 years 10 months ago

Carl-Marius,

Access permissions to both of these resources is controlled by a different set of credentials than the standard CCMAdmin and Serviceability web pages.  Specifically, a user needs to have (or know) a valid OS level admin account.

You can create accounts for users to access the OS.  You would need to create the account on each cluster node.  You can do this with the set account command.  Your only authorization control is a flag of "0" or "1".  To see what commands a "0" or "1" can do, all commands in the Admin CLI command guide show the admin level that is needed.

HTH.


Regards,
Bill

Correct Answer by Jonathan Schulenberg about 3 years 10 months ago

I can not logon to the:

     ”Cisco Unified OS Administration”

     ”Katastrofe genoprettelsessystem” (Catastrophic Recovery)

This is a separate login mechanism. The application-level user accounts (UCM Administration, Servicibility, etc) are stored within Informix while the OS-level accounts are part of RHES. You will need to create a separate account using the set account command from the CLI: http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cucm/cli_ref/7_1_3/cli_ref_713.html#wp39889

  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 5 (4 ratings)
Correct Answer
Jonathan Schulenberg Sun, 06/20/2010 - 07:33

I can not logon to the:

     ”Cisco Unified OS Administration”

     ”Katastrofe genoprettelsessystem” (Catastrophic Recovery)

This is a separate login mechanism. The application-level user accounts (UCM Administration, Servicibility, etc) are stored within Informix while the OS-level accounts are part of RHES. You will need to create a separate account using the set account command from the CLI: http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cucm/cli_ref/7_1_3/cli_ref_713.html#wp39889

Correct Answer
William Bell Sun, 06/20/2010 - 07:41

Carl-Marius,

Access permissions to both of these resources is controlled by a different set of credentials than the standard CCMAdmin and Serviceability web pages.  Specifically, a user needs to have (or know) a valid OS level admin account.

You can create accounts for users to access the OS.  You would need to create the account on each cluster node.  You can do this with the set account command.  Your only authorization control is a flag of "0" or "1".  To see what commands a "0" or "1" can do, all commands in the Admin CLI command guide show the admin level that is needed.

HTH.


Regards,
Bill

Carl-Marius.Steensen Sun, 06/20/2010 - 09:57

Hi Bill and Jonathan,

Thank you both for your answers! - Now it makes sence, I was looking for something that did not exist .

Thank you for your help and references!

Kind regards,

Carl-Marius

Actions

Login or Register to take actions

This Discussion

Posted June 20, 2010 at 6:02 AM
Stats:
Replies:3 Avg. Rating:5
Views:2391 Votes:0
Shares:0

Related Content

Discussions Leaderboard

Rank Username Points
1 21,016
2 15,047
3 10,314
4 7,999
5 4,856
Rank Username Points
164
95
75
61
55