Authorization profiles

Authorization profiles allow you to regulate the users' access authorizations. Authorization profiles are assigned to the users via their user account.

Specify the following permissions in an authorisation profile:

Table 1. Administration rights
Parameter	Description
User Access Control	Permits the user to create, edit and delete user accounts and authorization profiles.
Audio services	Permits the user to record and delete global greetings (voice mail) and courtesy texts (announcement services) as well as record and delete audio files for the music-on-hold function.

Table 2. Interface access
Parameter	Description
OIP	Allows the OIP server to access the communication server. This authorization is not intended for individual persons.
Office 45	Allows unlimited access to the configuration data via Office 45 (System Assistant).
FTP	Permits access to the internal FTP server of the communication server. Needs to be enabled for software upload.
Monitor	Permits access by monitors on the communication server for troubleshooting.
First-party CTI	Permits first-party applications to communicate via IP network with the communication server. This authorization is not intended for individual persons.
Third-party CTI	Permits third party applications to communicate via IP network with the communication server. This authorization is not intended for individual persons.
ATAS	Permits access to the ATAS interface.
Remote maintenance dial-up access	Allows access to the system by dialling a service number.
System Search	Allows the IP parameters displayed in System Search to be modified directly.
WebAdmin	Controls system access via WebAdmin. See WebAdminAccesses table below.
LDAP name service	Enables LDAP clients to access the integrated LDAP server (see IP network / LDAP server). LDAP clients can then access the system phone book.

Table 3. WebAdmin Accesses (*Interface access* section, *WebAdmin* selection field)
Parameter	Explanation
No access	Bars system access via WebAdmin.
Administrator access	Administrator rights in expert or standard mode (switchable): All administrator views and functions are available in expert mode. Simplified views and limited configuration sets are available in standard mode. The standard mode is suitable for speedy and clear system configurations without special requirements.
Administrator (Standard mode only)	Administrator rights for standard mode. Expert mode is blocked.
System assistant	Gives access to views of smaller adaptations in daily operations(e.g. user names, bills, phone book adaptations, acceptance of remote maintenance) Click Select views... to define the views which are to be available to the system assistant with this authorisation profile. All system assistant views are enabled in the default setting. Unlisted views are always displayed.
Hospitality administrator	Gives access to all views needed to set up the Hospitality Manager and the reception menu of a reception phone and to define its standard value. Moreover, the Hospitality Manager can be started with a link.
Receptionist	The Hospitality Manager is opened directly in case of access with this authorisation level.

Table 4. Standard profile authorisations: Administration rights
	1st party CTI user via LAN	Administrator	Administrator (Standard mode only)	Attendant	BluStar	BluStar Server	Hospitality administrator	LDAP	OIP	Receptionist	Support	System manager
User Access Control
Audio services

Table 5. Standard profile authorisations: Interface accesses
	1st party CTI user via LAN	Administrator	Administrator (Standard mode only)	Attendant	BluStar	BluStar Server	Hospitality administrator	LDAP	OIP	Receptionist	Support	System manager
OIP
Office 45
FTP
Monitor
First-party CTI
Third-party CTI
ATAS
Remote maintenance dial-up access
System Search (=m7)
WebAdmin	No access	Administrator	Administrator (Standard mode only)	System assistant	No access	No access	Hospitality administrator	No access	No access	Receptionist	Administrator	No access
LDAP name service

The already defined standard profiles can neither be deleted nor edited. However, you can create new authorisation profiles and edit or delete already created authorisation profiles.

Creating and editing an authorization profile

To create a new authorization profile, click New in the overview. The edit view of the new permission set is opened. Carry out the settings and click Apply to store them.
To view and edit the authorisation profile, click on the name in the overview. Next click the Apply button to save your inputs.

Searching for and displaying specific authorisation profiles

To search for and display specific authorisation profiles, enter as filter criterion a string of characters contained in one or more columns then click the Filter button.

All authorisation profiles are displayed for which the character string entered is contained in at least one column (see also "Filters in lists").

Deleting one or more authorization profiles

Click the Delete button.

Control boxes are displayed on the left side.
Tick the boxes of the authorization profiles you want to delete, and click the Delete button once again.

Tip:

To select or deselect all the authorisation profiles, click the checkbox in the Name title.

Switching from the edit mode to the overview

To switch from the edit mode to the overview, click the highlighted entry in the navigation tree or click the Cancel button.

↑