Solved: User rigths administration in the Cisco Call Manager 7.0?

Carl-Marius.Steensen · ‎06-20-2010

Hi,

I would like to create a customized user account that has administrator access to

”Cisco Unified Serviceability”

”Cisco Unified CM Administration”

”Cisco Unified Reporting”

”Cisco Unified OS Administration”

”Katastrofe genoprettelsessystem” (Catastrophic Recovery)

I have created a new end-user (adminbcms) and assigned the following "Groups" under the "Permissions Information" in the Call-Manager:

"Admin"

"PhoneAdministration"

"Standard CCM Admin Users"

"Standard CCM End Users"

"Standard CCM Super Users"

But with this permissions I only have permissions to logon to:

”Cisco Unified Serviceability”

”Cisco Unified CM Administration”

”Cisco Unified Reporting”

I can not logon to the:

”Cisco Unified OS Administration”

”Katastrofe genoprettelsessystem” (Catastrophic Recovery)

In the "Find and List Roles", I have the following roles I can assign to the end-users:

Name	Application	Description
AdminFU	Cisco Call Manager Administration	AdminFU
AdminFU	Cisco Call Manager Serviceability	AdminFU
AdminRO		AdminRO
FGServiceOgSupportFU	Cisco Call Manager Administration	FGServiceOgSupportFU
FGServiceOgSupportRO		FGServiceOgSupportRO
Silkeborg Helpdesk	Cisco Call Manager Administration	Silkeborg Helpdesk
Standard AXL API Access	Cisco Call Manager AXL Database	Access the AXL APIs
Standard Admin Rep Tool Admin		Administer CAR
Standard CCM Admin Users		All users with access to CCM web site
Standard CCM End Users		Access to CCM User Option Pages
Standard CCM Feature Management	Cisco Call Manager Administration	Standard CCM Feature Management
Standard CCM Gateway Management	Cisco Call Manager Administration	Standard CCM Gateway Management
Standard CCM Phone Management	Cisco Call Manager Administration	Standard CCM Phone Management
Standard CCM Route Plan Management	Cisco Call Manager Administration	Standard CCM Route Plan Management
Standard CCM Service Management	Cisco Call Manager Administration	Standard CCM Service Management
Standard CCM System Management	Cisco Call Manager Administration	Standard CCM System Management
Standard CCM User Management	Cisco Call Manager Administration	Standard CCM User Management
Standard CCM User Privilege Management	Cisco Call Manager Administration	Standard CCM User Privilege Management
Standard CCMADMIN Administration	Cisco Call Manager Administration	Administer all aspects of CCMAdmin system
Standard CCMADMIN Administration	Cisco Call Manager Dialed Number Analyser	Administer all aspects of CCMAdmin system
Standard CCMADMIN Read Only	Cisco Call Manager Administration	Read access to all CCMAdmin resources
Standard CCMADMIN Read Only	Cisco Call Manager Dialed Number Analyser	Read access to all CCMAdmin resources
Standard CCMUSER Administration	Cisco Call Manager End User	Administer all aspects of CCMUser system
Standard CTI Allow Call Monitoring	Cisco Computer Telephone Interface (CTI)	Allow monitoring of calls
Standard CTI Allow Call Park Monitoring	Cisco Computer Telephone Interface (CTI)	Allow monitoring of call park DNs
Standard CTI Allow Call Recording	Cisco Computer Telephone Interface (CTI)	Allow recording of calls
Standard CTI Allow Calling Number Modification	Cisco Computer Telephone Interface (CTI)	Allow calling number modification
Standard CTI Allow Control of All Devices	Cisco Computer Telephone Interface (CTI)	Allow control of all CTI controllable devices
Standard CTI Allow Reception of SRTP Key Material	Cisco Computer Telephone Interface (CTI)	Allows access to SRTP key material
Standard CTI Enabled	Cisco Computer Telephone Interface (CTI)	Enable CTI application control
Standard CTI Secure Connection	Cisco Computer Telephone Interface (CTI)	Application connection to CTI/CM must be secure
Standard CUReporting	Cisco Unified Reporting	Allows application users to generate reports from various sources
Standard EM Authentication Proxy Rights	Cisco Extension Mobility	Manages EM Authentication Rights
Standard FeatureFU	Cisco Call Manager Administration	Standard FeatureFU
Standard FeatureRO	Cisco Call Manager Administration	Standard FeatureRO
Standard GatewayFU	Cisco Call Manager Administration	Standard GatewayFU
Standard GatewayRO	Cisco Call Manager Administration	Standard GatewayRO
Standard Packet Sniffing	Cisco Call Manager Administration	Access to CCM Pages for Enabling Sniffing
Standard PhoneFU	Cisco Call Manager Administration	Standard PhoneFU
Standard PhoneRO	Cisco Call Manager Administration	Standard PhoneRO
Standard PluginFU	Cisco Call Manager Administration	Standard PluginFU
Standard PluginRO	Cisco Call Manager Administration	Standard PluginRO
Standard RealtimeAndTraceCollection	Cisco Call Manager Serviceability	Realtime and Trace Collection
Standard RoutePlanFU	Cisco Call Manager Administration	Standard RoutePlanFU
Standard RoutePlanRO	Cisco Call Manager Administration	Standard RoutePlanRO
Standard SERVICEABILITY	Cisco Call Manager Serviceability	Standard Serviceability
Standard SERVICEABILITY Administration	Cisco Call Manager Administration	Administer all aspects of Serviceability system
Standard SERVICEABILITY Administration	Cisco Call Manager Dialed Number Analyser	Administer all aspects of Serviceability system
Standard SERVICEABILITY Administration	Cisco Call Manager Serviceability	Administer all aspects of Serviceability system
Standard SERVICEABILITY Read Only	Cisco Call Manager Dialed Number Analyser	Read access to all Serviceability resources

But as far as I can see, none of the above "Roles" gives the access to the pages ”Cisco Unified OS Administration” or ”Katastrofe genoprettelsessystem” (Catastrophic Recovery).

Is it not possible to assign rights to an end user so it is possible to acces these 2 pages?

Kind regards,

Carl-Marius

Jonathan Schulenberg · ‎06-20-2010

I can not logon to the:

”Cisco Unified OS Administration”

”Katastrofe genoprettelsessystem” (Catastrophic Recovery)

This is a separate login mechanism. The application-level user accounts (UCM Administration, Servicibility, etc) are stored within Informix while the OS-level accounts are part of RHES. You will need to create a separate account using the set account command from the CLI: http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cucm/cli_ref/7_1_3/cli_ref_713.html#wp39889

View solution in original post

William Bell · ‎06-20-2010

Carl-Marius,

Access permissions to both of these resources is controlled by a different set of credentials than the standard CCMAdmin and Serviceability web pages. Specifically, a user needs to have (or know) a valid OS level admin account.

You can create accounts for users to access the OS. You would need to create the account on each cluster node. You can do this with the set account command. Your only authorization control is a flag of "0" or "1". To see what commands a "0" or "1" can do, all commands in the Admin CLI command guide show the admin level that is needed.

HTH.

Regards,
Bill

HTH -Bill (b) http://ucguerrilla.com (t) @ucguerrilla

Please remember to rate helpful responses and identify

View solution in original post

Jonathan Schulenberg · ‎06-20-2010

I can not logon to the:

”Cisco Unified OS Administration”

”Katastrofe genoprettelsessystem” (Catastrophic Recovery)

This is a separate login mechanism. The application-level user accounts (UCM Administration, Servicibility, etc) are stored within Informix while the OS-level accounts are part of RHES. You will need to create a separate account using the set account command from the CLI: http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cucm/cli_ref/7_1_3/cli_ref_713.html#wp39889

William Bell · ‎06-20-2010

Carl-Marius,

Access permissions to both of these resources is controlled by a different set of credentials than the standard CCMAdmin and Serviceability web pages. Specifically, a user needs to have (or know) a valid OS level admin account.

You can create accounts for users to access the OS. You would need to create the account on each cluster node. You can do this with the set account command. Your only authorization control is a flag of "0" or "1". To see what commands a "0" or "1" can do, all commands in the Admin CLI command guide show the admin level that is needed.

HTH.

Regards,
Bill

HTH -Bill (b) http://ucguerrilla.com (t) @ucguerrilla

Please remember to rate helpful responses and identify

Carl-Marius.Steensen · ‎06-20-2010

Hi Bill and Jonathan,

Thank you both for your answers! - Now it makes sence, I was looking for something that did not exist .

Thank you for your help and references!

Kind regards,

Carl-Marius