Configuring Privileges

Viewing Privileges

SUMMARY STEPS

  1. Choose Configure > Privileges.
  2. To see a different number of privileges on each page, on the top right, choose another number from the drop-down box and click Go. You can choose to see 10, 25, 50, 100, or all privileges.
  3. To move to another page, use the left and right arrow buttons on the bottom right, or enter another page number and press Enter.
  4. To sort the privileges, click any header.
  5. To delete a privilege, do the following:

DETAILED STEPS

Step 1

Choose Configure > Privileges.

The system displays the Configure Privileges page.

Step 2

To see a different number of privileges on each page, on the top right, choose another number from the drop-down box and click Go. You can choose to see 10, 25, 50, 100, or all privileges.

Step 3

To move to another page, use the left and right arrow buttons on the bottom right, or enter another page number and press Enter.

Step 4

To sort the privileges, click any header.

Step 5

To delete a privilege, do the following:

  1. Select the privilege to delete.

  2. Click Delete.

    Tip 

    You cannot delete the pfsread, pfsreadwrite, or the superuser privileges. However, privileges that are linked to a group can be deleted without prior warning and this will result in the group not having any privileges.

Overview of Privileges

Cisco Unified SIP Proxy provides three predefined privileges that you can assign to groups. You can also create your own privileges and modify the predefined privileges.

When you assign a privilege to a group, any member of the group is granted the privilege rights. An administrator group is created automatically by the software initialization process from the imported subscribers designated as administrators.

When you create or modify privileges, you add or delete the operations allowed by that privilege. Operations define the CLI commands and GUI functions that are allowed. Most operations include only one CLI command and GUI function. In addition to adding operations to a privilege, you can also configure a privilege to have another privilege nested inside of it. A privilege configured with a nested privilege includes all operations configured for the nested privilege.

List of Operations describes all available operations that you can add to privileges.


Note

You cannot modify the superuser privilege. The superuser privilege includes all the operations.

To configure privileges, see Creating a Privilege.

List of Operations

Table 1. List of Operations

Operation

Description

cusp.configuration

Configure cusp read and write access.

cusp.readonlyconfiguration

Configure cusp readonly access.

group.configuration

Create, modify, and delete groups.

security.aaa

Configure and modify AAA service settings.

security.access

Configure system level security regarding encryption of data, including defining crypto keys.

Note 

Also includes permission to reload the system.

security.password

Configure settings for the system password and policy, such as:

  • Expiry

  • Lockout (temporary and permanent)

  • History

  • Length

security.pin

Configure settings for the system PIN and policy, such as:

  • Expiry

  • Lockout (temporary and permanent)

  • History

  • Length

services.configuration

Configure system services: DNS, NTP/clock, SMTP, SNMP, Fax Gateway, Cisco UMG, hostname, domain, interfaces (counters), and system default language.

Note 

Also includes permission to reload the system.

services.manage

System level services commands not related to configuration like clearing DNS cache and ping.

software.install

Install, upgrade, or inspect system software or add-ons such as languages and licenses.

Note 

Also includes permission to reload the system.

system.backup

Configure backup.

system.configuration

Configure system settings such as the clock, hostname, domain name, default language, and interfaces (counters).

system.debug

Collect and configure trace and debug data. Includes copying data like core and log files.

system.view

View system settings and configuration.

user.configuration

Create, modify, and delete users and groups, including the configuration of:

  • First and Last Name

  • Nickname

  • Display Name

  • Language

user.password

Create, set, or remove others passwords.

user.pin

Create, set, or remove others PINs.

Creating a Privilege

SUMMARY STEPS

  1. Choose Configure > Privileges.
  2. Click Add.
  3. Enter a name and description for the privilege.
  4. Check the operations to add to the privilege. See List of Operations.
  5. Click Add.

DETAILED STEPS

Step 1

Choose Configure > Privileges.

The system displays the Configure Privileges page.

Step 2

Click Add.

Step 3

Enter a name and description for the privilege.

Step 4

Check the operations to add to the privilege. See List of Operations.

Step 5

Click Add.

Editing a Privilege

Before you begin

  • You cannot modify the pfsread, pfsreadwrite, or the superuser privilege.

  • Some operations are mandatory and cannot be removed.

  • Create a privilege. See Creating a Privilege.

SUMMARY STEPS

  1. Choose Configure > Privileges.
  2. Click the underlined name of the privilege to customize.
  3. Select the operations to add to the privilege or deselect the operations to remove.
  4. Click Apply.
  5. Click OK to save your changes.

DETAILED STEPS

Step 1

Choose Configure > Privileges.

The system displays the Configure Privileges page.

Step 2

Click the underlined name of the privilege to customize.

Step 3

Select the operations to add to the privilege or deselect the operations to remove.

Step 4

Click Apply.

Step 5

Click OK to save your changes.