Table Of Contents
Multilevel Administration Access Configuration
Logging On
Functional Groups
Adding a Functional Group
Updating a Functional Group
Deleting a Functional Group
User Groups
Adding a User Group
Deleting a User Group
Adding Users to a User Group
Deleting Users from a User Group
User Group Privileges
Assigning Privileges to a User Group
Viewing the Privileges Report
Viewing User Privileges
Changing CCMAdministrator Password
Configuring Multilevel Administration Access Parameters
Logging Out
Where to Find More Information
Multilevel Administration Access Configuration
Multilevel administration access allows users with full access to configure different levels of administration access for Cisco CallManager administrators. Users with full access configure functional groups, user groups, and access privileges for user groups. In general, full-access users configure the access of other users to Cisco CallManager Administration.
Three levels of access exist: full access, read-only access, and no access. These differ as follows:
•Users with full access can view and modify the Cisco CallManager Administration windows that belong to the functional groups to which the user's user group has full access.
•A user with read-only access can view the Cisco CallManager Administration windows that belong to the functional groups to which the user's user group has read-only access. A user with read-only access cannot, however, make any changes on the administration windows to which the user has only read-only access. For a user with read-only access, Cisco CallManager grays out all buttons and disables icons that modify Cisco CallManager configuration information.
•A user with no access can neither view nor change the Cisco CallManager Administration windows that belong to the functional groups to which the user's user group has no access.
Use the following topics to configure multilevel administration access:
•Logging On
•Functional Groups
•User Groups
•User Group Privileges
•Changing CCMAdministrator Password
•Configuring Multilevel Administration Access Parameters
•Logging Out
•Where to Find More Information
Related Topics
•Functional Groups
•User Groups
•User Group Access Privileges
Logging On
This section describes how to log on to Cisco CallManager Administration prior to performing multilevel administration access configuration.
Procedure
Step 1 After multilevel administration access has been installed, access Cisco CallManager Administration and Cisco CallManager Serviceability with the following URLs:
http://<CCMServer>/ccmadmin
http://<CCMServer>/ccmservice
where <CCMServer> specifies the IP address or name of the Cisco CallManager server.
Step 2 In the User Identification field, enter a valid user ID.
Step 3 In the Password field, enter a valid password for the user ID.
Note When you are logging in for the first time after installing multilevel administration access, log in as CCMAdministrator and use the password that was provided during the install.
Step 4 Click Log On.
Step 5 Proceed to Cisco CallManager Administration.
Note When you are logging in for the first time, configure functional groups user groups and assign privileges.
Related Topics
•Login Authentication
•Functional Groups
•User Groups
•User Group Privileges
•Changing CCMAdministrator Password
•Configuring Multilevel Administration Access Parameters
•Logging Out
Functional Groups
Functional groups comprise groups of Cisco CallManager Administration windows. Typically, each major menu item of Cisco CallManager Administration makes up a standard (default) functional group. You may, however, create custom functional groups that consist of Cisco CallManager Administration windows. The following topics describe adding, updating, and deleting functional groups:
•Adding a Functional Group
•Updating a Functional Group
•Deleting a Functional Group
Related Topics
•Functional Groups
•Logging On
•User Groups
•User Group Privileges
•Changing CCMAdministrator Password
•Configuring Multilevel Administration Access Parameters
•Logging Out
Adding a Functional Group
This section describes how to add a functional group to Cisco CallManager Administration.
Procedure
Step 1 Choose User > Access Rights > Functional Group.
The Functional Group Configuration window displays.
Step 2 In the Functional Group Name field, enter the name of a new functional group.
Step 3 Click the check box next to the menu(s) that you want to include in the new functional group.
By default, all submenu windows related to a menu item get selected when you click on a menu item.
Step 4 To remove a particular submenu window, click the check box next to the submenu window that you want to exclude from the new functional group.
Step 5 Click Insert.
The name of the functional group that you added displays in alphabetical order in the Functional Groups list at left.
Related Topics
•Updating a Functional Group
•Deleting a Functional Group
•User Groups
•User Group Privileges
•Functional Groups
Updating a Functional Group
This section describes how to update a functional group in Cisco CallManager Administration.
Procedure
Step 1 Choose User > Access Rights > Functional Group.
The Functional Group Configuration window displays.
Step 2 In the list of Functional Groups at left, click the name of the functional group that you want to update.
Note You cannot update nor delete a standard functional group.
The functional group that you chose displays.
Step 3 Click the check box next to the menu(s) or submenu(s) that you want to update in the functional group that you chose.
Step 4 Click Update.
Related Topics
•Adding a Functional Group
•Deleting a Functional Group
•User Groups
•Functional Groups
•Functional Groups
Deleting a Functional Group
This section describes how to delete a functional group in Cisco CallManager Administration.
Procedure
Step 1 Choose User > Access Rights > Functional Group.
The Functional Group Configuration window displays.
Step 2 In the list of Functional Groups at left, click the name of the functional group that you want to delete.
Note You cannot delete a standard functional group.
The functional group that you chose displays.
Step 3 Click Delete.
You receive a message that asks you to confirm the deletion.
Step 4 Click OK.
The window refreshes, and the functional group that you deleted no longer displays in the Functional Groups list at left.
Related Topics
•Adding a Functional Group
•Updating a Functional Group
•User Groups
•User Group Privileges
•Functional Groups
User Groups
User groups comprise lists of directory users. A user may belong to multiple user groups. After you add a user group, you then add users to a user group. Afterward, you may proceed to assign privileges to a user group. If a user belongs to multiple user groups, the MLA permission enterprise parameter determines the effective privilege of the user.
The following topics describe adding and deleting user groups and adding and deleting users to (from) user groups:
•Adding a User Group
•Deleting a User Group
•Adding Users to a User Group
•Deleting Users from a User Group
Related Topics
•User Groups
•Logging On
•Functional Groups
•User Group Privileges
•Changing CCMAdministrator Password
•Configuring Multilevel Administration Access Parameters
•Logging Out
Adding a User Group
This section describes how to add a user group to Cisco CallManager Administration.
Procedure
Step 1 Choose User > Access Rights > User Group.
The User Group Configuration window displays.
Step 2 In the User Group Name field, enter the name of a new user group.
Step 3 Click Insert.
The name of the user group that you added displays in alphabetical order in the User Groups list at left.
Step 4 Proceed to add users to this user group. See Adding Users to a User Group.
Step 5 Proceed to assign privileges to the user group. See Assigning Privileges to a User Group.
Related Topics
•User Groups
•Adding Users to a User Group
•Deleting a User Group
•Functional Groups
•User Group Privileges
Deleting a User Group
This section describes how to delete a user group from Cisco CallManager Administration. Use the following procedure to delete a user group entirely. If you want to delete only certain users from a user group, see Deleting Users from a User Group.
Procedure
Step 1 Choose User > Access Rights > User Group.
The User Group Configuration window displays.
Step 2 In the list of User Groups at left, click the name of the user group that you want to delete.
The user group that you chose displays. The list shows the users in this user group in alphabetical order.
Step 3 If you want to delete the group entirely, click Delete Group.
Related Topics
•User Groups
•Adding a User Group
•Deleting Users from a User Group
•Functional Groups
•User Group Privileges
Adding Users to a User Group
This section describes how to add users to a user group in Cisco CallManager Administration.
Procedure
Step 1 Choose User > Access Rights > User Group.
The User Group Configuration window displays.
Step 2 In the list of User Groups at left, click the name of the user group to which you want to add users.
The user group that you chose displays. The list shows the users that currently belong to the user group that is listed under Users in the group.
Step 3 Click Add a User to Group.
The User Group Configuration window displays.
Step 4 In the User Search field, enter a user name and click Search.
Note You can perform the search for users in a variety of ways. You can enter the first name, last name, or user ID of a user. Alternatively, you can leave the field blank, which results in display of all users.
If the user that you specified is found in the database, the user's record displays. If the list display contains too many users, click Refine Search to narrow the search by repeating this step.
Step 5 In the list of search results, click the check box next to the users that you want to add to this user group. If the list comprises multiple pages, use the links at the bottom to see more results.
Step 6 Click Add Selected.
The User Group Configuration window redisplays with the users that you added listed in the Users in the group list.
Note After you add a user, you can view the user's privileges by clicking the key icon next to the user's name.
Related Topics
•User Groups
•Deleting Users from a User Group
•Adding a User Group
•Deleting a User Group
•Functional Groups
•User Group Privileges
Deleting Users from a User Group
This section describes how to delete users from a user group in Cisco CallManager Administration.
Procedure
Step 1 Choose User > Access Rights > User Group.
The User Group Configuration window displays.
Step 2 In the list of User Groups at left, click the name of the user group from which you want to delete users.
The user group that you chose displays. The list shows the users that currently belong to the user group that is listed under Users in the group.
Step 3 Click the check boxes next to the names of the users that you want to delete from this user group.
Step 4 Click Delete Selected.
A confirmation message asks you to confirm the deletion.
Step 5 Click OK.
The User Group redisplays with the deleted users removed from the Users in the group list.
Related Topics
•User Groups
•Adding Users to a User Group
•Adding a User Group
•Deleting a User Group
•Functional Groups
•User Group Privileges
User Group Privileges
Users with full access can assign privileges to user groups for access to functional (window) groups.
Use the following topics to assign privileges to user groups:
•Assigning Privileges to a User Group
•Viewing the Privileges Report
•Viewing User Privileges
Related Topics
•User Group Access Privileges
•Logging On
•Functional Groups
•User Groups
•Changing CCMAdministrator Password
•Configuring Multilevel Administration Access Parameters
•Logging Out
Assigning Privileges to a User Group
This section describes assigning privileges to a user group in Cisco CallManager Administration.
Procedure
Step 1 Choose User > Access Rights > Assigning Privileges to User Group.
The Assign Privileges to User Group window displays.
Step 2 Click the name of the user group to which you want to assign privileges.
For the user group that you chose, the list of associated functional groups displays. For each functional group, an access privilege displays.
Step 3 For each functional group, choose the privilege level that you want to assign to users in this user group. Choose one of the following choices from the drop-down list: No Access, Read Only, or Full Access.
Step 4 Click Update.
Related Topics
•User Group Access Privileges
•Viewing the Privileges Report
•Functional Groups
•User Groups
Viewing the Privileges Report
This section describes how to view the privileges report. The privileges report shows the privileges that are assigned to all user groups for each functional group. The report displays user groups in rows that form the left column of the report. The various functional groups form the report columns. User groups display alphabetically from top to bottom. Functional groups display alphabetically from left to right.
Use the following procedure to view the privileges report.
Procedure
Step 1 Choose User > Access Rights > Assigning Privileges to User Group.
The Assign Privileges to User Group window displays.
Step 2 Click View Privileges Report.
The Privileges Report window displays.
Step 3 To return to assigning privileges, click Back to Assign Privileges.
Related Topics
•User Group Access Privileges
•Assigning Privileges to a User Group
•Functional Groups
•User Groups
Viewing User Privileges
This section describes how to view the privileges that are assigned to a user. Use the following procedure to view the privileges that are assigned to a user.
Procedure
Step 1 Choose User > Access Rights > User Group.
The User Group Configuration window displays.
Step 2 In the list of User Groups at left, click the name of the user group to which the user whose privileges you want to view belongs.
The User Group that you chose displays. The list shows the users in this user group.
Step 3 Click the key icon next to the user whose privileges you want to view.
The privilege report of the user displays.
Related Topics
•User Group Access Privileges
•Assigning Privileges to a User Group
•Functional Groups
•User Groups
Changing CCMAdministrator Password
Multilevel administration access provides a way to change the CCMAdministrator password. Only the CCMAdministrator can access the Change CCM Admin Password window and can change the CCMAdministrator password. The new password applies only on the node on which you have changed the CCMADministrator password.
Use the following procedure to change the CCMAdministrator password in Cisco CallManager Administration.
Procedure
Step 1 Choose User > Access Rights > Change CCM Admin Password.
The Change CCM Admin Password window displays.
Step 2 Enter the new password for CCMAdministrator.
Step 3 Enter the new password for CCMAdministrator again for confirmation.
Step 4 Click Update.
The password will take effect the next time that you log in as CCMAdministrator.
Note Because the CCMAdministrator password is stored in the local registry, you must change the CCMAdministrator on all the nodes. Only the CCMAdministrator can access the User > Access Rights > Change CCM Admin Password window.
Related Topics
•Login Authentication
•Logging On
•Functional Groups
•User Groups
•User Group Privileges
•Configuring Multilevel Administration Access Parameters
•Logging Out
Configuring Multilevel Administration Access Parameters
Users with full access can configure multilevel administration access parameters. This section describes how to configure multilevel administration access parameters.
Procedure
Step 1 Choose User > Access Rights > Configure MLA Parameters.
The Configure MLA Parameters window displays.
Step 2 To change the Directory Base parameter, enter the value for Directory Base.
Step 3 To change the Debug Level parameter, enter the value for Debug Level.
Step 4 To change the Effective Access Privileges for overlapping user groups parameter, choose a value for Effective Access Privileges for overlapping user groups.
Step 5 To change the Effective Access Privileges for overlapping functional groups parameter, choose a value for Effective Access Privileges for overlapping functional groups.
Step 6 Click Update.
Related Topics
•Login Authentication
•Logging On
•Functional Groups
•User Groups
•User Group Privileges
•Changing CCMAdministrator Password
•Logging Out
Logging Out
This section describes how to log out from Cisco CallManager Administration after performing multilevel administration access configuration.
Procedure
Step 1 In Cisco CallManager Administration, choose Logout.
Cisco CallManager logs you out from Cisco CallManager Administration.
Related Topics
•Logging On
•Functional Groups
•User Groups
•User Group Privileges
•Changing CCMAdministrator Password
•Configuring Multilevel Administration Access Parameters
Where to Find More Information
Related Topics
•Introduction
•Installing Multilevel Administration Access
•Standard User Groups and Functional Groups
Additional Cisco Documentation
•Cisco CallManager Multilevel Administration Troubleshooting Guide
•Release Notes for Cisco CallManager Multilevel Administration Access, Release 1.2(4a)
•Installing Cisco CallManager
•Cisco CallManager System Guide
•Cisco CallManager Administration Guide
•Cisco CallManager Serviceability System Guide
•Cisco CallManager Serviceability Administration Guide