I have someone that wants to look at their own CDR data and I am curious if I can create a CAR user that can only see a certain subset of the data or if I will need to query the data (sql, or soap?) from a 3rd party web app that I create.
Here is a reference to this good question
Configuring CAR Administrators, Managers, and Users
Any user can act as a CAR administrator (including application users); however, you must add the end user to the Cisco CAR Administrators User Group in Cisco Unified Communications Manager Administration (Standard CAR Admin Users). End users who have been identified as CAR administrators have full control over the CAR system. The administrator can modify all the parameters that relate to the system and the reports. End users who have not been identified as CAR administrators can access only designated CAR reports.
Note An application user that acts as a CAR administrator can configure all reports except the Individual Bill report. An application user that acts as a CAR administrator cannot access end user (CCM user) windows. CAR notifications do not get sent to the application user because no mail ID exists for the application user.
Tip To use CAR, ensure at least one CAR administrator exists in the Cisco Unified Communications Manager database.
Before you log in to CAR, you must configure at least one CAR user that has administrative privileges in CAR. To configure CAR administrators, managers, and users, perform the following procedure:
Step 1 In Cisco Unified Communications Manager Administration, add an end user by choosing User Management > End User. For additional information on how to perform this task, see the Cisco Unified Communications Manager Administration Guide. To create a manager, make sure that you enter a value in the Manager User ID field.
Note After creating the End User, edit the user password credentials by clicking the button Edit Credentials near the password text box. Uncheck the User Must Change at Next Login check box. If this action is not taken, you will get IMS_ERROR_CODE_5 (See Table 2-3 for the "CAR Invalid Logon Messages") and will not be allowed to log in to CAR. Then, you must log in to Cisco Unified Communications Manager Administration to manually reset the password.
Tip Cisco recommends that you configure at least one CAR user that has administrative privileges in CAR before you start using CAR. If you have not configured a CAR administrator or want to configure another CAR administrator, continue with this procedure.
Step 2 Choose User Management > User Group; click Find.
The Find and List User Groups window displays.
Step 3 Click Standard CAR Admin Users.
The CAR User Group window displays.
Step 4 Click the Add End Users to Group button.
Step 5 Check the check box(es) for the users that you want to add to the group and click Add Selected.
The user displays in the Users in Group group box.
Tip To revoke CAR administrative privileges, check the check box of the user in Users in Group group box and click Delete Selected. When the warning message displays, click OK. The system revokes the privileges immediately.