Fetching PerfMon Hunt Group counters

[john pulley]

I need to configure a user to fetch Hunt Group counters using the PerfMon API.  This user also needs read only access to the AXL database. To maintain security, we'd like to use just the roles required.  I've been able to fetch Hunt Group counter data from a lab switch and from a Sandbox, but only using administrator user logins with maximum access. So far our attempt at a minimal set of permissions with the PerfMon API does connect but doesn't return any counter names or values. The counters we looking for "Cisco Hunt Lists" and "Cisco Hunt Pilots".

Our current user is set with these permissions:

Groups:
Standard CCM Admin Users
Standard CCM End Users
Standard CCM Read Only
Standard CCM Super Users
Standard Packet Sniffer Users
Standard RealtimeAndTraceCollection
Standard TabSync User

Roles:
Standard AXL API Access
Standard Admin Rep Tool Admin
Standard Audit Log Administration
Standard CCM Admin Users
Standard CCM End Users
Standard CCMADMIN Administration
Standard CCMADMIN Read Only
Standard CCMUSER Administration
Standard CUReporting
Standard CUReporting Authentication
Standard EM Authentication Proxy Rights
Standard Packet Sniffing
Standard RealtimeAndTraceCollection
Standard SERVICEABILITY Administration
Standard SERVICEABILITY Read Only
Standard SSO Config Admin

Any help would be appreciated.

[Maren Mahoney]

I'd take a look at the Admin Guide and look at Access Control Groups to look at the definitions for each of the Roles. Here is a link for CUCM 14:  https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/14SU2/adminGd/cucm_b_administration-guide-14su2/cucm_b_test-adminguide_chapter_010.html#CUCM_RF_S39BBFBA_00 

You'll want to create a custom Access Control Group and may have to play with the Roles a but at a minimum (given the list above), I'd say the group would need:

• Standard AXL API Access
• Standard AXL API Users
• Standard Audit Log Administration
• Standard RealtimeAndTraceCollection

And maybe....?

• Standard AXL Read Only API Access
• Standard Packet Sniffing

None of that would grant the account the rights to log into the CUCM GUI. Start with the above and you may need to play around a bit. Let us know how it goes.

Maren