Cisco Unified Communications Manager Administration Guide, Release 9.1(1)
Role setup
Downloads: This chapterpdf (PDF - 1.05MB) The complete bookPDF (PDF - 9.6MB) | Feedback

Role setup

Role setup

This chapter provides information to configure roles.

Related Information

Role setup

In Cisco Unified Communications Manager Administration, use the User Management > Role menu path to configure roles.

Roles allow Cisco Unified Communications Manager administrators who have full administration privilege (access) to configure end users and application users with different levels of privilege. Administrators with full administration privilege configure roles and user groups. In general, full-access administration users configure the privilege of other administration users and end users to Cisco Unified Communications Manager Administration and to other applications.

Different levels of privilege exist for each application. For example, for Cisco Unified Communications Manager Administration, two levels of privilege exist: read privilege and update privilege. These privilege levels differ as follows:

  • Users with update privilege can view and modify the Cisco Unified Communications Manager Administration windows to which the user group of the user has update privilege.
  • A user with read privilege can view the Cisco Unified Communications Manager Administration windows that belong to the roles to which the user group of the user has read privilege. A user with read privilege for a window cannot, however, make any changes on those administration windows to which the user has only read privilege. For a user with read privilege, the Cisco Unified Communications Manager Administration application does not display any update buttons or icons.

Roles comprise groups of resources for an application. If you want to do so, you can create custom roles that comprise custom groupings of resources for an application. At installation, default standard roles are created for various administrative functions. For example, to configure Audit Log Administration, choose the Standard Audit Log Administration role. When the Role Configuration window displays, check the Read or Update check box for the resource you want to configure and click Save.


Tip


Certain standard roles have no associated application nor resource. These roles provide login authentication for various applications.


Example add or copy roles

To configure Audit Log Administration, choose the Standard Audit Log Administration role. When the Role Configuration window displays, click the Read or Update check box for the resource that you want to configure and click Save.


Note


Copying a role also copies the privileges that are associated with that role.


If you are adding a new role, choose an application from the Application drop-down list box and click Next. In the Role Configuration window that displays, enter the appropriate settings as described in Table 1.

Role deletions

You cannot delete a standard role.

Role settings

The following table describes the role settings.

Table 1 Role settings
Field Description

Role Information

Application

From the drop-down list box, choose the application with which this role associates.

Name

Enter a name for the role. Names can comprise up to 128 characters.

Valid characters include letters, numbers, dashes, dots (periods), spaces, and underscores.

Description

Enter a description for the role. Descriptions can have up to 128 characters.

Resource Access Information

(list of resource names for the chosen application)

In the Resource Access Information pane, click the check box(es) next to the resource(s) that you want this role to include.

Note   

In some applications, only one check box applies for each resource. In the Cisco Unified Communications Manager Administration application, a read check box and an update check box apply to each resource.

Grant access to all

Click this button to grant privileges for all resources that display on this page for this role.

Note   

If the list of resources displays on more than one page, this button applies only to the resources that display on the current page. You must display other pages and use the button on those pages to change the access of the resources that are listed on those pages.

Deny access to all

Click this button to remove privileges for all resources that display on this page for this role.

Note   

If the list of resources displays on more than one page, this button applies only to the resources that display on the current page. You must display other pages and use the button on those pages to change the access of the resources that are listed on those pages.

Related Information