- Cisco Unified Communications Manager System Guide, Release 9.0(1)
Feedback
Contents
- Application users and end users
- Manage application user and end user configuration
- Application users
- End users
- Credential management
- User and application profiles
- Device association
- Device association for application users
- Device association for end users
- Cisco Unified Mobility for end users
- Cisco Extension Mobility profiles
- Cisco IP softphone profiles
Application users and end users
This chapter provides information about te Application User Configuration window and the End User Configuration window in Cisco Unified Communications Manager Administration which allow the administrator to add, search, display, and maintain information about Cisco Unified Communications Manager application users and end users. This chapter describes the options for managing user information.
- Manage application user and end user configuration
- Application users
- End users
- Credential management
- User and application profiles
- Device association
- Cisco Unified Mobility for end users
- Cisco Extension Mobility profiles
- Cisco IP softphone profiles
Manage application user and end user configuration
ProcedureThe Application User Configuration window and the End User Configuration window in Cisco Unified Communications Manager Administration allow you to add, search, display, and maintain information about Cisco Unified Communications Manager application users and end users.
The general steps and guidelines for managing application user and end user information is as follows.
Application users
Application user configuration allows updates to the application users that are associated with Cisco Unified Communications Manager. By default, Cisco Unified Communications Manager Administration includes these application users:
- CCMAdministrator
- CCMSysUser
- CCMQRTSecureSysUser
- CCMQRTSysUser
- IPMASecureSysUser
- IPMASysUser
- WDSecureSysUser
- WDSysUser
- TabSyncSysUser
- CUCService
Installation requires you to configure an administrator login and password for the system. You cannot delete these default application users or the administrator user that you create at install, but you can change their passwords and modify the lists of devices that they control.
Tip
Ensure that you do not lose the password that you created during installation.
To configure application user information in Cisco Unified Communications Manager, use the menu option in Cisco Unified Communications Manager Administration.
End users
You can add end users to the Cisco Unified Communications Manager database, or you can use the corporate LDAP directory. If you use the corporate directory for authentication, end users use their LDAP directory passwords; you cannot change these passwords. You can, however, configure and change end user PINs.
Note
If your system uses LDAP authentication, you must configure end user default credentials immediately after installation, or logins will fail. The system does not support empty (null) credentials.
You can add new end users through Cisco Unified Communications Manager Administration only when synchronization with the corporate LDAP server is disabled. When synchronization is disabled, you can add new users, and you can change the settings of existing users, including the user ID. If synchronization is enabled, you cannot add users, delete users, or change existing user IDs. You can, however, change all other settings for existing end users in the End User Configuration window.
To check whether LDAP synchronization is enabled, choose in Cisco Unified Communications Manager Administration. If the Enable Synchronizing from LDAP Server check box is checked, you know that synchronization is enabled.
To configure end user information, choose in Cisco Unified Communications Manager Administration.
You can use the End User, Phone, DN, and LA Configuration window to add a new user and a new phone at the same time. You can associate a directory number and line appearance for the new end user by using the same window. To access the End User, Phone, DN, and LA Configuration window, choose .
Note
The End User, Phone, DN, and LA Configuration window only allows adding a new end user and a new phone. The window does not allow entry of existing end users or existing phones.
Credential management
When you configure an application or end user, you can add or change login credentials (password or PIN) in the user configuration window.
After the user gets added to the database, you can manage these credentials in the Credential Configuration for window, which you access with the Edit Credentials button in the End User or Application User Configuration window. For example, you can block the user from changing the password, or you can require the user to change the password at the next login.
You can also view lockout events and reset a lockout for a password or PIN for the user. Authentication events get updated in the window according to the credential policy that you assigned to this user.
The Credential Configuration window also provides an option to change the user credential policy assignment. To manage credentials for individual users, or for more information about credential policies, see Credential policy.
User and application profiles
After you add a new application or end user, you can assign a CAPF profile with the End User CAPF Profile or the Application User CAPF Profile menu options. Cisco Unified Communications Manager uses the CAPF profile to authenticate application or end user certificate downloads from the CAPF server. JTAPI / TSP or CTI applications use this certificate to establish a secure connection with Cisco CTIManager.
After you assign the profile, the CAPF Information pane in the user configuration window displays the assigned profile and allows you to update the settings. For general information about CAPF profiles, see the Credential policy section.
After you add a new end user, options in the Extension Mobility pane allow you to configure extension mobility profiles. These profiles allow each end user to personalize Cisco Extension Mobility.
Device association
Associating devices to an application user or to an end user gives the user control over specified devices. Application users and end users control some devices, such as phones. When application users or end users have control of a phone, they can control certain settings, such as speed dial and call forwarding, for that phone.
Device association for application users
Use the Device Information portion of the Application User Configuration window to associate devices with an existing application user. The Available Devices pane lists the devices that are available for association with an application user. The Available Devices pane lists devices by device name. To search for additional devices to associate with an application user, use the Find more Phones, Find more Route Points, and Find more Pilot Points buttons. Each button opens a popup window where you can limit the list of devices by entering search criteria based on all or part of the device name, description, or other parameter. To limit the list of available devices to a specific selection, enter the criteria by which you want to search by using the following methods:
- Choose a search parameter, such as device name, description, or directory number.
- Choose the comparison operator, such as begins with.
- Enter search text.
For example, to list all extensions that begin with "5," you would choose Directory Number begins with and then enter 5 in the text box.
After you have specified the search criteria to display devices, all matching, available devices display in the Search Results. You can navigate the list by using the buttons at the bottom of the window.
You can associate one or more devices to the application user by checking that check box next to that device. If a device has multiple extensions that are associated with it, each line extension displays in the list. You need to choose only one line extension to choose all the lines that are associated with that device.
Device association for end users
Use the Device Associations portion of the End User Configuration window to associate devices with an existing end user. The Controlled Devices pane lists the devices that are already associated with an end user. The Controlled Devices pane lists devices by device name. To search for additional devices to associate with an end user, use the Device Association button. This button opens the User Device Association window where you can limit the list of devices by entering search criteria based on all or part of the device name or description. To limit the list of available devices to a specific selection, enter the criteria by which you want to search by using the following methods:
- Choose a search parameter, such as device name or description.
- Choose the comparison operator, such as begins with.
- Enter search text.
After you have specified the search criteria to display devices, all matching, available devices display in the Device association for (this end user) portion of the User Device Association window. You can navigate the list by using the buttons at the bottom of the window.
You can associate one or more devices to the end user by checking that check box next to that device. If a device has multiple extensions that are associated with it, each line extension displays in the list. You need to choose only one line extension to choose all the lines that are associated with that device.
Cisco Unified Mobility for end users
In the End User Configuration window, you can enable Mobile Connect and Mobile Connect Access for the user. Checking the Enable Mobility check box in the End User Configuration window triggers licensing to consume device license units for Mobile Connect, and assigning a device to the user specifically for Cisco Unified Mobility controls the number of device license units that are consumed for Cisco Unified Mobility.
In the End User Configuration window, you can also configure the maximum time that is permitted to pass before the user must pick up a call that is transferred from the mobile phone to a desktop phone. Likewise, you can configure the maximum number of phones to which the user is permitted to transfer calls from the desktop phone.
The End User Configuration window lists the remote destination profiles that are configured for the end user.
Cisco Extension Mobility profiles
Use Cisco Extension Mobility to configure a Cisco Unified IP Phone to appear temporarily as a user phone. The user can log in to a phone, and the user extension mobility profile (including line and speed-dial numbers) resides on the phone. This feature applies primarily in environments where users do not get permanently assigned to physical phones.
User device profiles and device profile defaults support the Cisco Extension Mobility feature. The user device profile includes the following information:
- Device Profile Information-Includes Device Type, User Device Profile Name, Description, User Hold Audio Source, and User Locale.
- Phone Button Information-Includes Phone Button Template for the device type.
- Softkey Template Information-Includes list of available softkey templates.
- Expansion Module Information-Includes Cisco Unified IP Phone add-on modules such as the Cisco Unified IP Phone 7914 Expansion Module.
- Multilevel Precedence and Preemption Information-Includes MLPP domain, indication, and preemption settings.
- Logged-Out Default Profile Information-Includes Log In User ID
An authentication scheme authenticates the user. The workflow engine sends an XML string through an HTTP post request to the Login Service. The string contains the following items:
