Staging Guide for Cisco Unified ICM/Contact Center Enterprise & Hosted, Release 10.0(1)
Domain Manager
Downloads: This chapterpdf (PDF - 1.58MB) The complete bookPDF (PDF - 4.21MB) | The complete bookePub (ePub - 1.21MB) | Feedback

Domain Manager

Domain Manager

The Domain Manager is a tool for creating all Cisco OUs along with their associated groups and permissions. This helps you to determine which users in your corporate domain have access rights to perform Unified ICM tasks.

Figure 1. ICM Domain Manager



The Domain Manager also allows you to:

  • Assign users to groups
  • View existing service logon accounts
  • Get extended security group information
  • Get detailed permission information
  • Run integrated with setup or stand alone
    • Installed with each component
    • Program group shortcut on Administration & Data Servers

Domain Manager Tool Functionality

The Domain Manager Tool performs the following functions:

  • Creates a Cisco Root OU named Cisco_ICM in the domain. After Domain Manager creates this root OU, it also creates two domain local security groups:
    • Cisco_ICM_Config
    • Cisco_ICM_Setup
  • Creates a facility OU under the Cisco Root OU, and creates two domain local security groups:
    • <Facility name>_Config
    • <Facility name>_Setup
    The Domain Manager adds the <Facility name>_Setup group to the <Facility name>_Config group. The Domain Manager also adds security groups as follows:
    • Adds Cisco_ICM_Config group to <Facility name>_Config
    • Adds Cisco_ICM_Setup group to <Facility name>_Setup
  • Creates an instance OU under each facility OU, and creates three domain local security groups:
    • <Facility name>_<Instance name>_Config
    • <Facility name>_<Instance name>_Setup
    • <Facility name>_<Instance name>_Service
    The Domain Manager also performs the following operations:
    • Adds <Facility name>_<Instance name>_Setup to <Facility name>_<Instance name>_Config, because the setup group needs the permissions for the config group.
    • <Facility name>_Config group to <Facility name>_<Instance name>_Config
    • <Facility name>_Setup group to <Facility name>_<Instance name>_Setup
    The config security group has domain read write permission, so that the user in that group can create a users group as well as OUs in the domain.
Related Information

Open the Domain Manager

In order to run the Domain Manager, a user must be a Domain admin or a domain user who has domain read write permission, so that the user can create OUs and groups.

Procedure
You can open the Domain Manager in the following ways:
  • Open the Domain Manager application from the Cisco Unified Tools folder.
  • Access through Start > Programs > Cisco Unified CCE Tools > Domain Manager.


Note


When the Domain Manager dialog box opens, multiple domains might display in the domain tree in the left pane of the dialog box. The default domain displayed is the domain the current user is logged into.

Domain Manager Window

The Domain Manager dialog box displays the current domain and the Cisco Unified ICM related OUs contained in the domain.

Figure 2. Domain Manager Dialog Box

Domain Manager Tree

The Domain Manager tree display provides a quick view of the Unified ICM created AD OUs and groups in the selected domains. You can display Multiple domains in the tree. The default domain displayed is the current machine domain. When you first expand a domain node, it is validated. The OU Validation Errors dialog box appears only if the error is due to missing or incorrect OU hierarchy information.

A context menu displays when you right-click any object in the Domain Manager tree. These menus provide additional functionality specific to the following level:

  • Domains
    • Add Cisco Root
    • Refresh
  • Cisco Root
    • Remove Cisco Root
    • Add Facility
    • Security Information
    • Properties
  • Facility
    • Remove Facility
    • Add Instance
    • Security Information
  • Instance
    • Service Log On Properties
    • Security Information
    • Remove Instance
  • Security group
    • Security Group Members
    • Properties
Table 1 Domain Manager Dialog Box Properties

Property

Description

Domains

To add or remove a domain from the Domain Manager tree, click Select. The Select Domains dialog box appears. For more information, see View Domains.

Cisco Root

To add the Cisco Root when you select a domain that does not already have the Cisco Root, click Add. The Select OU dialog box appears (for more information, see Create or Add Cisco Root). To remove the selected Cisco Root and all of its facilities and instances, click Remove.

Facility

To add a new facility, select the Cisco Root OU then click Add. The Enter Facility Name dialog box appears (for more information, see Create or Add Facility OU). To remove the selected facility and all of its instances, click Remove.

Instance

To add an instance, select a facility in the Domain tree display, then click Add. The Add Instance dialog box appears (for more information, see Create Instance OU). To remove the selected instance, click Remove.

Security group

Click Members to display the Security Group Members dialog box (for more information, see Add Users to Security Group) where you assign users to security groups.

View Domains

Procedure
    Step 1   Open the Domain Manager.
    Step 2   In the right top pane of the Domain Manager, click Select.

    The Select Domains dialog box opens.
    Figure 3. Select Domains Dialog Box

    You can now add or remove domains for use with the system software.

    Table 2 Select Domain Dialog Box Properties

    Property

    Description

    Enter domain name:

    Allows you to enter fully qualified domain name. Once the qualified domain name is entered, click Add. The domain appears in the Choose domains list.

    Filter domain choices

    • Forest – Filters the Choose domains list to display only domains in the same forest.
    • Trusted – Filters the Choose domains list to display only trusted domains.
    • Both – Filters the Choose domains list to display both forest and trusted domains.

    Choose domains:

    Choose a domain from the displayed list:

    • Add > — Adds domains selected in the Choose domains list to the Selected domains list.
    • < Remove — Removes selected domains from the Selected domains list.
    • Add All >> — Adds all the domains in the Choose domains list to the Selected domains list.
    • << Remove All — Moves all the domains from the Selected domains list to the Choose domains list.

    Selected domains:

    Displays a list of all the selected domains.

    Related Information

    Add Domain to a View

    You can add domains by using the controls in the Select Domains dialog box. Follow these steps to add a domain:

    Procedure
      Step 1   In the left pane under Choose domains, select one or more domains.
      Step 2   Click Add > to add the selected domains, or click Add All >> to add all the domains.

      You can also manually type in a domain to add to a view instead of clicking.

      Step 3   In the field under Enter domain name, enter the fully qualified domain name to add.
      Step 4   Click Add.
      Step 5   Click OK.

      The added domains now appear in the Domain Manager dialog box. You can then add the Cisco Root OU.

      Related References

      Remove Domain from a View

      You can remove domains by using the controls in the Select Domains dialog box. Follow these steps to remove a domain:

      Procedure
        Step 1   In the Select Domains dialog box, in right pane under Selected domains:, select one or more domains.
        Step 2   Click <Remove to remove the selected domains, or click <<Remove All to remove all the domains.
        Step 3   Click OK.

        The removed domains no longer appear in the Domain Manager dialog box.

        Related Tasks

        Create or Add Cisco Root

        You can create the Cisco Root OU either in the domain root, or beneath another OU in the domain.


        Note


        The user who creates the Cisco Root OU automatically becomes a member of the Setup Security Group for the Cisco Root OU. In effect, this user is granted privileges to all Unified ICM tasks in the domain.
        Procedure
          Step 1   Select the domain you want to add.

          If the current domain, which the Domain Manager loads by default, is not the domain to which you want to add a root, then add a domain to the view.

          Step 2   Click the Cisco Root Add button. This displays the Select OU dialog box.
          Step 3   Click Add to add the Root.

          This displays the Select Organizational Unit dialog box.

          Figure 4. Select OU Dialog Box

          Step 4   Select the OU under which you want to create the Cisco Root OU, then click OK.

          When you return to the Unified ICM Domain Manager dialog box, the Cisco Root OU appears either at the domain root, or under the OU you selected in step 3. You can now add facilities and configure security groups.


          Note


          The Domain Administrator is made a member of the Setup group as well.

          To access the Cisco Root Properties, right-click the Root node in the main dialog box and select Properties. Add is disabled if the Root already exists.

          Related References

          Remove Cisco Root


          Note


          Only users with administrative control at the level above the Cisco Root OU can delete the Cisco Root OU.
          Procedure
            Step 1   Open the Domain Manager.
            Step 2   Select the root in the tree.
            Step 3   In the right pane under Cisco Root, click Remove.

            You are prompted to confirm the removal of the Cisco_ICM OU.

            Warning    All Unified ICM instances in this domain will no longer work properly if the OU is removed. All users, groups, and other objects in this OU will also be deleted.
            Step 4   Click OK to confirm the removal.

            Related Information

            Create or Add Facility OU

            You create a Facility OU to group one or more Instance OUs.


            Note


            You must create at least one Facility OU before you can create a Unified ICM instance.

            Before you can create a Facility OU, you must have created the Cisco Root OU for the domain.

            Procedure
              Step 1   Open the Domain Manager.
              Step 2   In the tree view in the left pane, select the Cisco Root OU under which you want to create the Facility OU.
              Step 3   In the right pane, under Facility, click Add.

              The Enter Facility Name dialog box opens.

              Figure 5. Enter Facility Name Dialog Box

              Step 4   Enter the name for the facility.
              Note    Facility OU names must be 32 characters or less, and cannot contain the characters # , + " < > ; / \ [] : ? *
              Step 5   Click OK.

              The Facility OU is created in the OU tree and shown in the left pane, beneath the Cisco Root OU.

              Related References
              Related Information

              Remove Facility OU


              Note


              Only users with administrative control at the level above the Facility OU might delete the Facility OU.
              Procedure
                Step 1   Open the Domain Manager.
                Step 2   In the tree view in the left pane, navigate down the tree to find and select the Facility OU you want to delete.
                Step 3   In the right pane, under Facility, click Remove.

                You are prompted to confirm the removal.

                Warning    All Unified ICM instances in this facility will no longer work properly if the OU is removed. All users, groups, and other objects in this OU will also be deleted.
                Step 4   Click OK to confirm the removal.

                The Facility OU is removed from the tree.

                Related Information

                Create Instance OU

                You can create an Instance OU while creating a Unified ICM instance, or before you create the Unified ICM instance.

                Procedure
                  Step 1   Open the Domain Manager.
                  Step 2   In the tree view in the left pane, navigate to and select the Facility OU under which you want to create the Instance OU.
                  Step 3   In the right pane, under Instance, click Add.

                  The Add Instance dialog box opens.

                  Figure 6. Add Instance (Organizational Unit) Dialog Box

                  Step 4   At this point, you have two options:
                  1. If you are installing Unified ICM on the current computer for the first time, under the Enter instance name radio button, enter the instance name.
                    Note   

                    The Instance OU name must be five alpha-numeric characters or less, cannot begin with a numeric character, and cannot be a reserved name such as local or sddsn.

                  2. If you are upgrading an existing Unified ICM instance, the instance is listed under the Select existing instances radio button. In this situation, select Select existing instance, then select the Unified ICM instance from the list.
                  Step 5   Click OK.

                  The Instance OU is added below the selected Facility OU.

                  Related References
                  Related Information

                  Remove Instance OU

                  Procedure
                    Step 1   Open the Domain Manager.
                    Step 2   In the tree view in the left pane, navigate down the tree to find and select the Instance OU you want to delete.
                    Step 3   In the right pane, under Instance, click Remove.

                    You are prompted to confirm the removal.

                    Warning    This Unified ICM instance will no longer work properly if the OU is removed. All users, groups, and other objects in this OU will also be deleted.
                    Step 4   Click OK to confirm the removal.

                    The Instance OU is removed from the tree.

                    Related Information

                    Security Groups

                    A security group is a collection of domain users to whom you grant a set of permissions to perform tasks with the system software.

                    For each security group, you add a set of domain users who are granted privileges to the functions controlled by that security group. The Security Group Members dialog box displays the list of groups that are members of the security group selected in the Domain Manager main dialog box. You can add and remove users from the selected group using this dialog box.

                    Figure 7. Security Group Members Dialog Box

                    Table 3 Security Group Members Dialog Box Properties

                    Property

                    Description

                    Groups

                    Displays groups that are members of the security group selected in the Domain Manager main dialog box

                    Users

                    Displays the name and user login name of the user.

                    Add

                    Use this option to add members to Security Group.

                    Remove

                    Use this option to remove the selected users from the Users list.

                    OK

                    Use this option to save changes and return to Domain Manager.

                    Related Information

                    Add Users to Security Group

                    Procedure
                      Step 1   In the Domain Manager, select the Security Group you want to add a user to.
                      Step 2   Click Member in the Security Group pane of the ICM Domain Manager.

                      The Security Group dialog box appears.

                      Figure 8. Security Group Members Dialog Box

                      Step 3   In the Users pane, select Add.

                      The Add Members to Security Group dialog box appears.

                      Figure 9. Add Members to Security Group Dialog Box

                      Step 4   Select the filters that are used to create a list of users to select from.
                      • Domain – Select the domain you want to add as a member to the Security Group.
                      • Optional filter Select the optional filter you want to use:
                        • <None> – No additional filter selections applied, Condition and Value inaccessible.
                        • Name – Continue and search the appropriate Condition and Value. This filter is based on the username of the user.
                        • User Login Name – Continue and search the appropriate Condition and Value. This filter is based on the username of the user.
                      • Condition Select the condition to facilitate your search for the member you want to list:
                        • Contains – find and list members containing the entered Value.
                        • Starts with – find and list members whose name or user login name starts with the entered Value.
                        • Ends with – find and list members whose name or user logon name ends with the entered Value.
                      • Value Enter the appropriate value to search on, for example, enter the first name of the user you want to add. This provides a list of members with that name for you to choose from.
                      Step 5   Select the member you want to add to the Security Group from the displayed list.
                      Step 6   Click OK to add the selected member to the Security Group.

                      Related Information

                      Remove Members from Security Group

                      Procedure
                        Step 1   In the Domain Manager, select the Security Group from which you want to remove members.
                        Step 2   In the Security Group pane of the Domain Manager dialog box, select Members.

                        The Security Group dialog box appears.

                        Step 3   In the Users pane, select the member you want to remove from the Security Group.
                        Step 4   Click Remove.
                        Step 5   Click OK to remove the selected member from the Security Group.

                        Related Information

                        Organizational Unit Validation Errors Dialog Box

                        Figure 10. Organizational Unit Validation Errors Dialog Box

                        This dialog box appears if errors are found during OU validation.

                        Table 4 Organizational Unit Validation Errors Dialog Box Properties

                        Property

                        Description

                        Validation error for organizational unit:

                        Displays the OU containing the error found during OU validation.

                        Error

                        Displays description of errors found during OU validation.

                        Location

                        Displays the location of each error found during OU validation.

                        Do you want to fix the errors?

                        Four possible responses:

                        • Yes – Fixes the displayed error then attempts to sequentially validate the next OU. If additional errors are found, you return to this dialog box.
                        • Yes to All – Recursively fixes the displayed error and any errors found during sequential validation attempts for other ICM OUs without returning to this dialog box.
                        • No – Does not fix the displayed error but attempts to sequentially validate the next OU. If additional errors are found, you return to this dialog box.
                        • No to All – Does not fix the displayed error but recursively validates the OUs and logs any additional errors without returning you to this dialog box.