The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This chapter provides information about te Application User Configuration window and the End User Configuration window in Cisco Unified Communications Manager Administration which allow the administrator to add, search, display, and maintain information about Cisco Unified Communications Manager application users and end users. This chapter describes the options for managing user information.
The Application User Configuration window and the End User Configuration window in Cisco Unified Communications Manager Administration allow you to add, search, display, and maintain information about Cisco Unified Communications Manager application users and end users.
The general steps and guidelines for managing application user and end user information is as follows.
Application user configuration allows updates to the application users that are associated with Cisco Unified Communications Manager. By default, Cisco Unified Communications Manager Administration includes these application users:
CCMAdministrator
CCMSysUser
CCMQRTSecureSysUser
CCMQRTSysUser
IPMASecureSysUser
IPMASysUser
WDSecureSysUser
WDSysUser
TabSyncSysUser
CUCService
Installation requires you to configure an administrator login and password for the system. You cannot delete these default application users or the administrator user that you create at install, but you can change their passwords and modify the lists of devices that they control.
Tip | Ensure that you do not lose the password that you created during installation. |
To configure application user information in Cisco Unified Communications Manager, use the menu option in Cisco Unified Communications Manager Administration.
If you use the corporate directory for authentication, LDAP synchronized end users use their LDAP directory passwords; you cannot change these passwords. You can, however, configure and change end user PINs. Additionally, you can configure and change local user passwords.
Note | If your system uses LDAP authentication, you must configure end user default credentials immediately after installation, or logins will fail. The system does not support empty (null) credentials. |
To check whether LDAP synchronization is enabled, choose in Cisco Unified Communications Manager Administration. If the Enable Synchronizing from LDAP Server check box is checked, you know that synchronization is enabled. When LDAP synchronization is enabled, the local users are still active and after performing a synchronization, users that are imported from the LDAP directory are also active.
To configure end user information, choose in Cisco Unified Communications Manager Administration.
You can use the End User, Phone, DN, and LA Configuration window to add a new user and a new phone at the same time. You can associate a directory number and line appearance for the new end user by using the same window. To access the End User, Phone, DN, and LA Configuration window, choose .
Note | The End User, Phone, DN, and LA Configuration window only allows adding a new end user and a new phone. The window does not allow entry of existing end users or existing phones. |
When you configure an application or end user, you can add or change login credentials (password or PIN) in the user configuration window.
After the user gets added to the database, you can manage these credentials in the Credential Configuration for window, which you access with the Edit Credentials button in the End User or Application User Configuration window. For example, you can block the user from changing the password, or you can require the user to change the password at the next login.
You can also view lockout events and reset a lockout for a password or PIN for the user. Authentication events get updated in the window according to the credential policy that you assigned to this user.
The Credential Configuration window also provides an option to change the user credential policy assignment. To manage credentials for individual users, or for more information about credential policies, see Credential Policy.
After you add a new application or end user, you can assign a CAPF profile with the End User CAPF Profile or the Application User CAPF Profile menu options. Cisco Unified Communications Manager uses the CAPF profile to authenticate application or end user certificate downloads from the CAPF server. JTAPI / TSP or CTI applications use this certificate to establish a secure connection with Cisco CTIManager.
After you assign the profile, the CAPF Information pane in the user configuration window displays the assigned profile and allows you to update the settings. For general information about CAPF profiles, see the Credential Policy section.
After you add a new end user, options in the Extension Mobility pane allow you to configure extension mobility profiles. These profiles allow each end user to personalize Cisco Extension Mobility.
Associating devices to an application user or to an end user gives the user control over specified devices. Application users and end users control some devices, such as phones. When application users or end users have control of a phone, they can control certain settings, such as speed dial and call forwarding, for that phone.
Use the Device Information portion of the Application User Configuration window to associate devices with an existing application user. The Available Devices pane lists the devices that are available for association with an application user. The Available Devices pane lists devices by device name. To search for additional devices to associate with an application user, use the Find more Phones, Find more Route Points, and Find more Pilot Points buttons. Each button opens a popup window where you can limit the list of devices by entering search criteria based on all or part of the device name, description, or other parameter. To limit the list of available devices to a specific selection, enter the criteria by which you want to search by using the following methods:
Choose a search parameter, such as device name, description, or directory number.
Choose the comparison operator, such as begins with.
Enter search text.
For example, to list all extensions that begin with "5," you would choose Directory Number begins with and then enter 5 in the text box.
After you have specified the search criteria to display devices, all matching, available devices display in the Search Results. You can navigate the list by using the buttons at the bottom of the window.
You can associate one or more devices to the application user by checking that check box next to that device. If a device has multiple extensions that are associated with it, each line extension displays in the list. You need to choose only one line extension to choose all the lines that are associated with that device.
Use the Device Associations portion of the End User Configuration window to associate devices with an existing end user. The Controlled Devices pane lists the devices that are already associated with an end user. The Controlled Devices pane lists devices by device name. To search for additional devices to associate with an end user, use the Device Association button. This button opens the User Device Association window where you can limit the list of devices by entering search criteria based on all or part of the device name or description. To limit the list of available devices to a specific selection, enter the criteria by which you want to search by using the following methods:
Choose a search parameter, such as device name or description.
Choose the comparison operator, such as begins with.
Enter search text.
After you have specified the search criteria to display devices, all matching, available devices display in the Device association for (this end user) portion of the User Device Association window. You can navigate the list by using the buttons at the bottom of the window.
You can associate one or more devices to the end user by checking that check box next to that device. If a device has multiple extensions that are associated with it, each line extension displays in the list. You need to choose only one line extension to choose all the lines that are associated with that device.
In the End User Configuration window, you can enable Cisco Mobility and Mobile Connect Access for the user. Checking the Enable Mobility check box in the End User Configuration window triggers licensing to consume device license units for Cisco Unified Mobility, and assigning a device to the user specifically for Cisco Unified Mobility controls the number of device license units that are consumed for Cisco Unified Mobility.
In the End User Configuration window, you can also configure the maximum time that is permitted to pass before the user must pick up a call that is transferred from the mobile phone to a desktop phone. Likewise, you can configure the maximum number of phones to which the user is permitted to transfer calls from the desktop phone.
The End User Configuration window lists the remote destination profiles that are configured for the end user.
Use Cisco Extension Mobility to configure a Cisco Unified IP Phone to appear temporarily as a user phone. The user can log in to a phone, and the user extension mobility profile (including line and speed-dial numbers) resides on the phone. This feature applies primarily in environments where users do not get permanently assigned to physical phones.
User device profiles and device profile defaults support the Cisco Extension Mobility feature. The user device profile includes the following information:
Device Profile Information-Includes Device Type, User Device Profile Name, Description, User Hold Audio Source, and User Locale.
Phone Button Information-Includes Phone Button Template for the device type.
Softkey Template Information-Includes list of available softkey templates.
Expansion Module Information-Includes Cisco Unified IP Phone add-on modules such as the Cisco Unified IP Phone 7914 Expansion Module.
Multilevel Precedence and Preemption Information-Includes MLPP domain, indication, and preemption settings.
Logged-Out Default Profile Information-Includes Log In User ID
An authentication scheme authenticates the user. The workflow engine sends an XML string through an HTTP post request to the Login Service. The string contains the following items:
You can associate a device (line) to a user as a Cisco IP Softphone. This enables users to use their desktop PC to place and receive telephone calls and to control an IP telephone.