User Guide for Cisco Unified Provisioning Manager 1.3.1
Managing Subscribers and Users

Table Of Contents

Managing Subscribers and Users

Managing Subscribers

Creating Subscribers

Updating Subscriber Information

Resetting Subscriber Passwords

Understanding Call Processor Passwords

Managing Authorization Roles

Synchronizing a Subscriber

Removing a Subscriber

Accessing Subscriber Records

Working with Subscriber Roles

Creating a New Subscriber Role Type

Updating a Subscriber Role Type

Associating Products to a Subscriber Role Type

Assigning Provisioning Attribute Precedence

Changing the Name of a Subscriber Role Type

Editing Provisioning Attributes for a Subscriber Role Type

Removing a Subscriber Role Type

Managing Users

Creating Users

Updating User Information

Resetting User Passwords

Managing Authorization Roles

Synchronizing Users

Removing a User

Accessing Subscriber Records for a User


Managing Subscribers and Users


These topics describe how to use subscriber and user management:

Managing Subscribers

Working with Subscriber Roles

Managing Users

Managing Subscribers

A subscriber is a person who has active IP Telephony services. Provisioning Manager treats the subscriber as the owner of all active services in the voice network. All services are tied to subscribers.

This section describes the following:

Creating Subscribers

Updating Subscriber Information

Resetting Subscriber Passwords

Managing Authorization Roles

Synchronizing a Subscriber

Removing a Subscriber

Accessing Subscriber Records

Creating Subscribers


Step 1 Select Provisioning Dashboard > Manage Subscribers > Add Subscriber. The Manage Subscriber page appears.


Tip The Provisioning Dashboard page provides a direct link to the Manage Subscriber page. In the Manage Subscriber pane, click Add Subscriber.


Step 2 Do the following:

Select a Domain.

Enter a subscriber ID. This is a unique ID and is not case sensitive. Valid values are alphanumeric characters (A-Z, a-z, 0-9), underscore (_), hyphen (-), period (.), and at sign (@).

Enter the subscriber's name.


Note Remember the following when entering the subscribers name:

For Cisco Unified Communications Manager Express and Cisco Unity Express, enter only alphabetical characters in the First Name and Last Name fields. If you use other types of characters, orders for the subscriber will fail.

For Call Processors, the combination of characters for First Name and Last Name cannot exceed 30 characters. If this limit is exceeded, when you place an order, the Call Processor sends an error.


(Optional) Enter the subscriber's phone number.

(Optional) Enter the subscriber's email address.

(Optional) Enter the subscriber's department.

(Optional) Select roles for the subscriber.


Note The default or Employee subscriber role should be configured to match the typical setup of employees in your organization. If you do not configure the default or Employee subscriber role to meet your needs, you may not see all the desired options in the employee subscriber record. The DefaultUserType rule (see DefaultUserType, page 6-6) controls which subscriber role is set as the default. Provisioning Manager comes with the Employee subscriber role configured as the default subscriber role.


Step 3 Click Create. The subscriber is created. You can now update any of the subscriber information.


Tip In the Manage Subscriber page, you can access a particular subscriber's Subscriber Record Details page. Click either View Subscriber Services or Order Subscriber Services.



Updating Subscriber Information

Once a subscriber is created you can use the Manage Subscriber page to do the following:

Change subscriber's name—Changing the subscriber's name does not also change the phone or line description field for the subscriber (if a phone or line was ordered for the previous subscriber name).


Note Remember the following when entering the subscribers name:

For Cisco Unified Communications Manager Express and Cisco Unity Express, enter only alphabetical characters in the First Name and Last Name fields. If you use other types of characters, orders for the subscriber will fail.

For Cisco Unified Communications Manager, the combination of characters for First Name and Last Name cannot exceed 30 characters.


Change subscriber's phone number.

Change subscriber's email.

Change subscriber's department.

Change roles.

View subscriber services.

Order subscriber services.

Manage passwords. (See Resetting Subscriber Passwords.)

Manage authorization roles. (See Managing Authorization Roles.)

Synchronize subscriber. Appears only after an order is placed for the subscriber. (See Synchronizing a Subscriber.)


Step 1 Select Provisioning Dashboard > Manage Subscribers > Add Subscriber. The Manage Subscriber page appears.

Step 2 Click the Chooser icon () next to the Subscriber ID field. The Choose a Subscriber dialog box appears.


Tip The Provisioning Dashboard page provides a direct link to the Choose a Subscriber dialog box. In the Manage Subscriber pane, click View Subscribers.


Step 3 Select the subscriber that you require. The user information is populated in the Manage Subscriber page.

Step 4 Change the desired information.

Step 5 Click Update.


Resetting Subscriber Passwords

You can reset passwords only if you have the correct privileges (see Managing Authorization Roles). You can reset the following:

Provisioning Manager login password

Cisco Unified Communications Manager password (see Understanding Call Processor Passwords)

Cisco Unified Communications Manager PIN

Cisco Unified Communications Manager Express password (see Understanding Call Processor Passwords)

Cisco Unity Subscriber password


Note The Cisco Unified Communications Manager password cannot be modified when the Cisco Unified Communications Manager is configured to use external authentication. Provisioning Manager indicates that the password is updated, even though it is not.


You can either reset the password to the Provisioning Manager system default, or specify a new password. You can obtain the default values for the user passwords on these systems from your Provisioning Manager administrator, Managed Service Provider, or corporate IT department.

The following rules control the default passwords:

SelfcareAccountsDefaultPassword

DefaultCallManagerPassword

DefaultCallManagerPIN

DefaultUnitySubscriberPassword

For more information about rules, see Business Rules, page 6-2.


Note After you reset a subscriber's password, you must inform the subscriber of the default value that is required to change their password.



Step 1 Open the Manage Subscriber page for the desired subscriber (see Updating Subscriber Information).

Step 2 Click Manage Password. The Password Management page appears.

Step 3 In the Password to Modify field, select the password to be changed.

Do one of the following:

To set the password to the default, click Reset to Default.

Specify a new password (and confirm it) and then click Set to New Value.

A message appears, asking you to confirm.

Step 4 Click Done.


Understanding Call Processor Passwords

Provisioning Manager subscribers can use their passwords to log into the Call Processors, where they can view and edit the configuration details of the phones associated to them. Subscribers can do the following:

For Cisco Unified Communications Manager—Using the URL https://<ccmhost_ipaddress>/CCMUser, log into a Cisco Unified Communications Manager where they have an account. Through the web interface, the subscriber can view or edit the configuration details of the phones associated to the subscriber.

For Cisco Unified Communications Manager ExpressUsing the URL http://<cmehost_ipaddress>/ccme.html, log into the Cisco Unified Communications Manager Express through a browser in which they have an account (to access Cisco Unified Communications Manager Express through a browser, separate configurations in Cisco Unified Communications Manager Express are required). Through the web interface, the subscriber can view or edit the configuration details of the phones associated to the subscriber.

Although Cisco Unified Communications Manager Express allows a subscriber to have only one associated phone, Provisioning Manager overcomes this limitation, allowing more than one phone to be associated to the subscriber. In Cisco Unified Communications Manager Express, new users are created with the same username appended with a tilde (~) and sequence index (starting with 1) from the second and subsequent phones (for example, TestUser and TestUser~1). Subscribers must use the exact username to view the corresponding phone details in the Cisco Unified Communications Manager Express web interface.

When you change the password value in Provisioning Manager, the password value is changed for all of the corresponding usernames in Cisco Unified Communications Manager Express.

Managing Authorization Roles

Table 2-1 lists the authorizations roles that are available in Provisioning Manager.


Step 1 Open the Manage Subscriber page for the desired subscriber (see Updating Subscriber Information).

Step 2 Click Manage Authorization Roles. The Assign User Authorization Roles page appears.

Step 3 Select the roles that you want to apply to the subscriber.

Step 4 Click Update.

Step 5 Click Done.


Synchronizing a Subscriber

You can synchronize a single subscriber. The subscriber's data in Provisioning Manager is synchronized with the subscriber's data in the Call Processor. For more information about synchronizing, see Synchronizing Domains, page 5-16.


Note When synchronizing subscribers, remember the following:

The username and phone number fields may display Unknown for subscribers who were initially created on Cisco Unified Communications Manager Express and then later synchronized to Provisioning Manager.

You can update the subscriber information through Provisioning Manager, but be aware that this information will be pushed to the Cisco Unified Communications Manager Express system, and will overwrite any existing information for the user in the ephone description field.

If a Cisco Unified Communications Manager Express is the only device present in a Domain and Service Area, during Domain synchronization subscribers are not created in Provisioning Manager if the ephone username command is not configured in Cisco Unified Communications Manager Express. Make sure the ephone username command is configured in Cisco Unified Communications Manager Express for all subscribers.

For Cisco Unified Communications Manager Express, when using the button command in ephone configuration mode, make sure you only use a colon (:) as the separator. Provisioning Manager only supports a colon as a separator in the button command. If any other separator is used, Provisioning Manager does not display the line in the Subscriber Record Details page. Only the phone is displayed.



Step 1 Open the Manage Subscriber page for the desired subscriber (see Updating Subscriber Information).

Step 2 Click Synchronize Subscriber. A confirmation dialog box appears. The Synchronize Subscriber option does not appear for a subscriber until an order is placed for the subscriber.


Note When synchronizing a single subscriber from the Manage Subscriber page, in addition to getting the user information from the device, Provisioning Manager runs a Domain synchronization. If the Domain contains a large number of users, the synchronization may take several minutes.


Step 3 Click OK.


Removing a Subscriber

A subscriber cannot be removed if there are products or services in their subscriber record. The products or services must be canceled first.


Step 1 Open the Manage Subscriber page for the desired subscriber (see Updating Subscriber Information).

Step 2 Click Remove.


Accessing Subscriber Records


Step 1 Select Provisioning Dashboard > Manage Subscribers > Search Subscribers. The Search page for subscribers appears.


Note When searching for subscribers using a subscriber's phone number, the Subscriber Search Result page only displays the contact number for a subscriber. This might not be the number that was used in the search. Also, if the subscriber is assigned multiple numbers that match the search, a record for each number is displayed.



Tip The Provisioning Dashboard page provides a direct link to the Search page for subscribers. In the Manage Subscriber pane, click Search Subscribers.


Step 2 Enter the subscriber information to use for searching and click Search. The Subscriber Search Results page appears.


Tip Clicking the information icon () opens the Manage Subscriber page for the subscriber.


Step 3 Select the subscriber that you require. The Subscriber Record Details page appears for the subscriber.


Working with Subscriber Roles

Subscriber roles control which products and services a subscriber can order. The subscriber role also dictates which Service Areas a subscriber is entitled to access.


Note Do not confuse subscribers with users. These two roles have different meanings in Provisioning Manager. For a description of a user, see Managing Users.


The default subscriber types are:

Employee—Default role assigned to new subscribers


Note The Employee subscriber role should be configured to match the typical setup of employees in your organization. If you do not configure the employee subscriber role to meet your needs, you may not see all the desired options in the employee subscriber record.


Contractor

Manager

Senior Manager

Executive

Operator

These subscriber types exist in each Domain in Provisioning Manager. Each set of subscriber types may be customized in each Domain by adding, removing, or changing these predefined subscriber types.

Creating a New Subscriber Role Type


Step 1 Select Advanced Setup > Policies > Subscriber Roles. The Subscriber Role Configuration page appears.

Step 2 Click New Subscriber Role.

Step 3 Do the following:

a. Enter a name for the new subscriber role.

b. Select the appropriate Domain.

c. Click Save.

The subscriber role is created, and the View Subscriber Role Type page appears.


Note After creating a role, you should associate products to the role (see Associating Products to a Subscriber Role Type).



Updating a Subscriber Role Type

The following sections describe what you can do to a subscriber role type:

Associating Products to a Subscriber Role Type

Assigning Provisioning Attribute Precedence

Changing the Name of a Subscriber Role Type

Editing Provisioning Attributes for a Subscriber Role Type

Removing a Subscriber Role Type

Associating Products to a Subscriber Role Type

When products are associated to a subscriber role, the subscribers with that role can order the associated products (for information on ordering products, see Ordering Products and Services, page 3-2).


Step 1 Select Advanced Setup > Policies > Subscriber Roles. The Subscriber Role Configuration page appears.

Step 2 In the Domain field, select the Domain where the subscriber role type exists.

Step 3 Click Choose Role to View. The Choose a Subscriber Role Type dialog box appears.

Step 4 Click the desired subscriber role type. The View Subscriber Role Type page appears.

Step 5 Click Associate Products. The Associate Products page appears.

Step 6 Click the check box next to the products that you want to associate to the subscriber role type.

Step 7 Click Save.


Assigning Provisioning Attribute Precedence

When a subscriber belongs to multiple subscriber role types, the precedence setting determines which subscriber type's provisioning attribute settings to use.


Step 1 Select Advanced Setup > Policies > Subscriber Roles. The Subscriber Role Configuration page appears.

Step 2 In the Domain field, select the Domain where you want to change provisioning attribute precedence.

Step 3 Click Assign Provisioning Attribute Precedence. The Assign Precedence page appears.

Step 4 Click the arrows next to a subscriber role type to move it up or down in the order of precedence.

Step 5 Click Save.


Changing the Name of a Subscriber Role Type


Step 1 Select Advanced Setup > Policies > Subscriber Roles. The Subscriber Role Configuration page appears.

Step 2 In the Domain field, select the Domain where the subscriber role type exists.

Step 3 Click Choose Role to View. The Choose a Subscriber Role Type dialog box appears.

Step 4 Click the desired subscriber role type. The View Subscriber Role Type page appears.

Step 5 Click Update. The Update Subscriber Role Type page appears.

Step 6 Change the subscriber role type name.

Step 7 Click Save.


Editing Provisioning Attributes for a Subscriber Role Type


Step 1 Select Advanced Setup > Policies > Subscriber Roles. The Subscriber Role Configuration page appears.

Step 2 In the Domain field, select the Domain where the subscriber role type exists.

Step 3 Click Choose Role to View. The Choose a Subscriber Role Type dialog box appears.

Step 4 Click the desired subscriber role type. The View Subscriber Role Type page appears.

Step 5 Click Edit Provisioning Attributes. The Provisioning Attribute Management page appears.

Step 6 Click the plus sign next to the attribute heading that you want to edit.

To edit an attribute's information, click the Edit icon () next to the attribute and make the desired changes.

To remove the attribute, click the Clear icon () next to the attribute.

Step 7 Click Done.


Removing a Subscriber Role Type


Step 1 Select Advanced Setup > Policies > Subscriber Roles. The Subscriber Role Configuration page appears.

Step 2 In the Domain field, select the Domain where the subscriber role type exists.

Step 3 Click Choose Role to View. The Choose a Subscriber Role Type dialog box appears.

Step 4 Click the desired subscriber role type. The View Subscriber Role Type page appears.

Step 5 Click Remove. A confirmation dialog box appears.

Step 6 Click OK. The subscriber role type is removed.


Managing Users

Users in Provisioning Manager represent logins to the system for people who can access Provisioning Manager to perform various activities. Users can be permitted to perform various roles within Provisioning Manager. These roles can be system-wide (for example, administrators), or they can be associated to a single Domain, which limits the scope of changes that the user can make. A user can also be a subscriber.


Note Provisioning Manager is configured with a permanent administrator account (pmadmin).


This section describes the following:

Creating Users

Updating User Information

Resetting User Passwords

Managing Authorization Roles

Synchronizing Users

Removing a User

Accessing Subscriber Records for a User

Creating Users


Step 1 Select System Administration > Manage Users. The Manage User page appears.

Step 2 Do the following:

Select a Services Domain. (A primary Domain, where all the user's services will be provisioned.)

Enter a user ID.

Enter the user's name.

(Optional) Enter the user's phone number.

(Optional) Enter the user's email address.

(Optional) Enter the user's department.

Step 3 Click Create. The user is created. You can now update any of the user information.


Updating User Information

Once a user is created you can use the Manage User page to change the following information:

User's name.

User's phone number.

User's email.

User's department.

Roles.

Also, you can do the following:

View subscriber's record.

Order services for the subscriber.

Set or modify passwords.

Manage authorization roles.

Synchronize subscribers. This option does not appear until an order is placed for the user.


Step 1 Select System Administration > Manage Users. The Manage User page appears.

Step 2 Click the Chooser icon () next to the User ID field. The Choose a User dialog box appears.

Step 3 Select the user that you require. The user information is populated in the Manage User page.

Step 4 Change the desired information.

Step 5 Click Update.


Resetting User Passwords

You can reset passwords only if you have the correct privileges (see Managing Authorization Roles). You can reset the passwords for the following:

Provisioning Manager login

Cisco Unified Communications Manager

Cisco Unified Communications Manager PIN

Cisco Unity subscriber


Note The Cisco Unified Communications Manager password cannot be modified when the Cisco Unified Communications Manager is configured to use external authentication. Provisioning Manager indicates that the password is updated, even though it is not.


You can either reset the password to the Provisioning Manager system default, or specify a new password. You can obtain the default values for the user passwords from your Provisioning Manager administrator, Managed Service Provider, or corporate IT department.

The default user passwords are controlled by the following rules (see Business Rules, page 6-2):

SelfcareAccountsDefaultPassword

DefaultCallManagerPIN

DefaultCallManagerPassword

DefaultUnitySubscriberPassword


Note After resetting a user's password, you must inform the user of the new value that was set.



Step 1 Open the Manage User page for the desired user (see Updating User Information).

Step 2 Click Manage Password. The Password Management page appears.

Step 3 In the Password to Modify field, select the password to be changed.

Do one of the following:

To set the password to the default, click Reset to Default.

Specify a new password (and confirm it) and then click Set to New Value.

A message appears, asking you to confirm.

Step 4 Click Done.


Managing Authorization Roles

Table 2-1 lists the authorization roles that are available in Provisioning Manager.


Note Global roles apply system-wide and Domain roles only apply to the Domains the user belongs to.


Table 2-1 Authorization Roles 

Authorization Role
Description
Global Roles

Administration

Has access to all Provisioning Manager functionality.

Maintenance

Authorized to configure system cleanup activities. See Administering Provisioning Manager, page 7-1.

Roles for Domain

In the drop-down list, select the Domain for which you are setting the authorization roles. The selected roles only apply to the selected Domain.

Policy

Authorized to view phone button templates, modify subscriber roles, and add or update phone inventory.

 

Ordering Roles

Users assigned these roles are allowed to place orders for other subscribers and themselves.

 

Ordering

Authorized to:

Add, delete, or update a subscriber within a Domain.

Add, delete, or update a subscriber role within a Domain (if the rule for that Domain permits it).

Add, delete, or update phones in the inventory within a Domain (if the rule for that Domain permits it).

Search and view detailed subscriber information within a Domain.

Place an order for a subscriber within a Domain.

   

Advanced Ordering

Authorized to access all the functionality specified by the Ordering role; can also access Advanced Order Options in the Order Entry page.

   

Advanced Assignment

Authorized to access all the functionality specified by the Ordering role, and to assign the MAC address for a phone product at the time of order entry.

 
Activity Roles

Users assigned one of these roles can perform activities assigned to the group during order processing.

 

Approval

Authorized to accept and complete the approval for orders.

 

Assignment

Authorized to accept the user activity for assigning the MAC address.

 

Shipping

Authorized to accept and complete shipping of orders.

 

Receiving

Authorized to accept and complete receiving of orders.



Step 1 Open the Manage User page for the desired user (see Updating User Information).

Step 2 Click Edit next to the assigned role field. The Assign User Authorization Roles page appears.


Tip To access the Assign User Authorization Roles page, you can also click Manage Authorization Roles.


Step 3 Select the roles that you want to apply to the user.

Step 4 Click Update.

Step 5 Click Done.


Synchronizing Users

If the user is also a subscriber, you can synchronize the user. The user's data in Provisioning Manager is synchronized with the user's data in the Call Processor. For more information about synchronizing, see Synchronizing Domains, page 5-16.


Note When synchronizing a single subscriber from the Manage Subscriber page, in addition to getting the user information from the device, Provisioning Manager runs a Domain synchronization. If the Domain contains a large number of users, the synchronization may take several minutes.



Step 1 Open the Manage User page for the desired user (see Updating User Information).

Step 2 Click Synchronize Subscriber. A confirmation dialog box appears. The Synchronize Subscriber option does not appear for a user until an order is placed for the user.

Step 3 Click OK.


Removing a User


Step 1 Open the Manage User page for the desired user (see Updating User Information).

Step 2 Click Remove. A confirmation dialog box appears.

Step 3 Click OK.


Accessing Subscriber Records for a User


Step 1 Open the Manage User page for the desired user (see Updating User Information).

Step 2 Click View Subscriber Services. The Subscriber Record Details page for the user appears.