To access the Cisco Unity Administrator®,
administrators can use one of these accounts: Administration or Windows
Administration account: This is the account that was
selected during installation to administer Cisco Unity. The Administration
account is automatically associated with a Cisco Unity subscriber account that
has class of service (CoS) rights to access the Cisco Unity
A Windows Domain account, which is associated with a Cisco
Unity subscriber account that has CoS rights to access the Cisco Unity
Administrator: This account must be a member of either of the
following Administrators groups in order to log on to the Cisco Unity
Administrator: Domain Administrators group, when the Cisco Unity server is a
domain controller, or Local Administrators group, when the Cisco Unity server
is a member server. Otherwise, the account must have the right to log on
locally so that administrators can log on to the Cisco Unity Administrator from
a computer other than the Cisco Unity server.
Note: Until you create a Cisco Unity subscriber account specifically for
the purpose of administering Cisco Unity, you must use the Microsoft
Windows® credentials associated with the
Administration account to log on to the Cisco Unity Administrator.
Create an alternative subscriber to the Administrator to help limit the
use of the Administration account. This ensures that additional accounts are
available that can be used to access the Cisco Unity Administrator if the
Administration account is deleted or corrupted.
Before you perform this configuration, you should be familiar with
Cisco Unity 4.0 Administration and Microsoft Windows 2000 Domain
The information in this document is based on Cisco Unity 4.x.
The information in this document was created from the devices in a
specific lab environment. All the devices used in this document started with a
cleared (default) configuration. If your network is live, make sure that you
understand the potential impact of any command.
Refer to the
Technical Tips Conventions for more information on document
The Cisco Unity subscriber accounts that are used to access the Cisco
Unity Administrator must have the appropriate CoS rights. In addition to CoS
rights, subscriber accounts that are used to access the Cisco Unity
Administrator must be associated with a Windows Domain account. For more
information, refer to
Subscriber Accounts That Can Be Used to Access the Cisco Unity
In this section, it is assumed that the subscriber that is selected to
use the Cisco Unity Administrator page is associated with a Windows Domain
CoS access settings specify which tasks subscribers, including other
system administrators, can perform in the Cisco Unity Administrator. You can
customize access to Cisco Unity in several ways. For example, you can deny
access either to the Cisco Unity Administrator or to specific pages within the
Cisco Unity Administrator, such as CoS, subscriber, or distribution-list
When you deny access to specific pages within the Cisco Unity
Administrator, the links for these pages are disabled for the subscriber.
Alternately, you can specify read, edit, add, or delete privileges for these
pages or allow subscribers access to subscriber pages for the sole purpose of
unlocking subscriber accounts or changing subscriber passwords.
Note: A subscriber who has a disabled Active Directory account or who does
not have a Windows Domain account cannot access the Cisco Unity Administrator,
even if the subscriber has the proper CoS privileges needed to access it. When
you use either the Cisco Unity Bulk Import Wizard or the Cisco Unity
Administrator to create a subscriber who already has an Exchange mailbox, Cisco
Unity neither enables an Active Directory account if it is disabled, nor
creates a Windows Domain account for the user if one does not already exist.
You can use GrantUnityAccess to associate a subscriber account with a
Windows Domain account, which allows an administrator to access the Cisco Unity
Administrator. You can also use GrantUnityAccess to grant access for one or
more Windows Domain accounts to the Cisco Unity Administrator, on one or more
Cisco Unity servers, without adding a new subscriber account for each. For more
details in regard to GrantUnityAccess, refer to
Account not Associated with Unity Subscriber.
CoS can be used to grant enough system access for subscribers to enable
them to perform the administrative tasks related to Call Handlers, Directory
Handler, or Restriction Tables. In order to login as a subscriber with full
system access, usually the administrator selected at the time of installation
of Cisco Unity, perform these steps:
Log in to the Cisco Unity Administrator.
Click Subscribers and choose the subscriber that
should be added to the Administrator group.
Choose Default Administrator from the
Class of service drop-down menu and click
Click System Access in the Class of
Check Call handlers access to add or delete call
handlers, as well as to edit or create the different levels of access available
to the subscriber.
In order to allow a particular subscriber to be able to reset password,
you can create a Class of Service (CoS) and give the permission to reset
passwords. Perform these steps:
Log in to the Cisco Unity Administrator.
Go to Subscribers > Class of
Click the + (plus) sign to create a new CoS based on
an existing subscriber. Use the default subscriber (or if you already have one
for your company use that instead).
Once the page comes up, go to the System Access Page
and check these checkboxes.
Cisco Unity Administrator Application
Note: This checkbox is checked when you want to give subscribers who
are assigned to this CoS access to the Cisco Unity Administrator. You can use
the check boxes below this setting to indicate the level of access
Can Unlock Subscriber Accounts and Change
Note: This checkbox can be checked to allow subscribers who are
assigned to this CoS to edit the necessary fields on subscriber pages in order
to unlock subscriber accounts, and to change subscriber passwords. For all
other fields on the subscriber pages, read-only access is permitted. This is
unavailable when the Cisco Unity Administrator Application Access checkbox is
not checked, or when the Subscribers Read, Edit, Add, or Delete checkboxes are
Update the subscriber using this newly created
There is currently no verification procedure available for this