# Authorization profiles

Authorization profiles allow you to regulate the users' access authorizations. Authorization profiles are assigned to the users via their user account.

Specify the following permissions in an authorisation profile:

Table 1. Administration rights
Parameter | Description
User Access Control | Permits the user to create, edit and delete user accounts and authorization profiles.
Audio services | Permits the user to record and delete global greetings (voice mail) and courtesy texts (announcement services) as well as record and delete audio files for the music-on-hold function.

Table 2. Interface access
Parameter | Description
OIP | Allows the OIP server to access the communication server. This authorization is not intended for individual persons.
Office 45 | Allows unlimited access to the configuration data via Office 45 (System Assistant).
FTP | Permits access to the internal FTP server of the communication server. Needs to be enabled for software upload.
Monitor | Permits access by monitors on the communication server for troubleshooting.
First-party CTI | Permits first-party applications to communicate via IP network with the communication server. This authorization is not intended for individual persons.
Third-party CTI | Permits third party applications to communicate via IP network with the communication server. This authorization is not intended for individual persons.
ATAS | Permits access to the ATAS interface.
Remote maintenance dial-up access | Allows access to the system by dialling a service number.
System Search | Allows the IP parameters displayed in System Search to be modified directly.
WebAdmin | Controls system access via WebAdmin. See WebAdminAccesses table below.
LDAP name service | Enables LDAP clients to access the integrated LDAP server (see IP network / LDAP server). LDAP clients can then access the system phone book.

Table 3. WebAdmin Accesses (Interface access section, WebAdmin selection field)
Parameter | Explanation
No access | Bars system access via WebAdmin.
Administrator access | Administrator rights in expert or standard mode (switchable): All administrator views and functions are available in expert mode. Simplified views and limited configuration sets are available in standard mode. The standard mode is suitable for speedy and clear system configurations without special requirements.
Administrator (Standard mode only) | Administrator rights for standard mode. Expert mode is blocked.
System assistant | Gives access to views of smaller adaptations in daily operations(e.g. user names, bills, phone book adaptations, acceptance of remote maintenance) Click Select views... to define the views which are to be available to the system assistant with this authorisation profile. All system assistant views are enabled in the default setting. Unlisted views are always displayed.
Hospitality administrator | Gives access to all views needed to set up the Hospitality Manager and the reception menu of a reception phone and to define its standard value. Moreover, the Hospitality Manager can be started with a link.
Receptionist | The Hospitality Manager is opened directly in case of access with this authorisation level.

Table 4. Standard profile authorisations: Administration rights
| 1st party CTI user via LAN | Administrator | Administrator (Standard mode only) | Attendant | BluStar | BluStar Server | Hospitality administrator | LDAP | OIP | Receptionist | Support | System manager
User Access Control |  |  |  |  |  |  |  |  |  |  |  |
Audio services |  |  |  |  |  |  |  |  |  |  |  |

Table 5. Standard profile authorisations: Interface accesses
| 1st party CTI user via LAN | Administrator | Administrator (Standard mode only) | Attendant | BluStar | BluStar Server | Hospitality administrator | LDAP | OIP | Receptionist | Support | System manager
OIP |  |  |  |  |  |  |  |  |  |  |  |
Office 45 |  |  |  |  |  |  |  |  |  |  |  |
FTP |  |  |  |  |  |  |  |  |  |  |  |
Monitor |  |  |  |  |  |  |  |  |  |  |  |
First-party CTI |  |  |  |  |  |  |  |  |  |  |  |
Third-party CTI |  |  |  |  |  |  |  |  |  |  |  |
ATAS |  |  |  |  |  |  |  |  |  |  |  |
Remote maintenance dial-up access |  |  |  |  |  |  |  |  |  |  |  |
System Search (=m7) |  |  |  |  |  |  |  |  |  |  |  |
WebAdmin | No access | Administrator | Administrator (Standard mode only) | System assistant | No access | No access | Hospitality administrator | No access | No access | Receptionist | Administrator | No access
LDAP name service |  |  |  |  |  |  |  |  |  |  |  |

The already defined standard profiles can neither be deleted nor edited. However, you can create new authorisation profiles and edit or delete already created authorisation profiles.

## Creating and editing an authorization profile

- To create a new authorization profile, click New in the overview. The edit view of the new permission set is opened. Carry out the settings and click Apply to store them.

- To view and edit the authorisation profile, click on the name in the overview. Next click the Apply button to save your inputs.

## Searching for and displaying specific authorisation profiles

To search for and display specific authorisation profiles, enter as filter criterion a string of characters contained in one or more columns then click the Filter button.

All authorisation profiles are displayed for which the character string entered is contained in at least one column (see also "Filters in lists").

## Deleting one or more authorization profiles

1. Click the Delete button.

   Control boxes are displayed on the left side.

2. Tick the boxes of the authorization profiles you want to delete, and click the Delete button once again.

Tip:

To select or deselect all the authorisation profiles, click the checkbox in the Name title.

## Switching from the edit mode to the overview

To switch from the edit mode to the overview, click the highlighted entry in the navigation tree or click the Cancel button.

Parent topic: Access control
↑