CUCM 6.1.2 - Multi Level Administration

[davidme]

Hi,

I have a system where we'd like to grant various levels of admin rights to make changes.

Currently - I can't find a way of allowing someone to subscribe phones and device profiles to services without giving them full super level access which just isn't possible.

Does anyone have a solution to this or is it just an error on my system?

Cheers

Dave

[KonradStepniewski · Accepted solution]

From documentation:

Application Users

Application user configuration allows updates to the application users that are associated with Cisco Unified Communications Manager. By default, Cisco Unified Communications Manager Administration includes these application users:

•CCMSysUser

•CCMQRTSecureSysUser

•CCMQRTSysUser

•IPMASecureSysUser

•IPMASysUser

•WDSecureSysUser

•WDSysUser

•TabSyncSysUser

•CUCService

Installation requires you to configure an administrator login and password for the system. You cannot delete these default application users or the administrator user that you create at install, but you can change their passwords and modify the lists of devices that they control.

Tip Ensure that you do not lose the password that you created during installation.

Note Administrator users in the Standard Unified CM Super Users group can access all administrative applications in the Cisco Unified Communications Manager Administration navigation menu (Cisco Unified Communications Manager Administration, Cisco Unified Serviceability, and Cisco Unified Reporting) with a single sign-on to one of the applications.

You set the default Administrator username and password during Cisco Unified Communications Manager installation. You can change the administrator password or set up a new administrator account in the Application User Configuration window in Cisco Unified Communications Manager Administration.

To configure application user information in Cisco Unified Communications Manager, use the User Management > Application User menu option in Cisco Unified Communications Manager Administration.

Note To configure this user for Cisco Unity or Cisco Unity Connection, you configure the application user in Cisco Unified Communications Manager Administration; then, configure any additional settings for the user in Cisco Unity or Cisco Unity Connection Administration.

Refer to the "Application User Configuration" section in the Cisco Unified Communications Manager Administration Guide for details.

Check this link for more information: http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/admin/6_1_1/ccmsys/a04user.html

[davidme]

Hi,

I resolved it in the end. The process was as follows:

1. Create a role by copying an existing role and then allow or deny access via the tick boxes.

2. Create a new user group and add end users or application users to the group.

3. Under user group, click on the role button and assign the role you created to the user group.

Simples.

Dave