01-29-2014 02:41 PM - edited 03-16-2019 09:30 PM
Hi All,
So we ran into this strange problem with our CUC 8.6. We have techs assigned to the Helpdesk role. They can reset the Voicemail PINs for almost all users save for a handful. When they attempt to reset the PINs for these users they get a Not Authorized error. What could be the cause of this?
Thanks,
Tom
01-29-2014 02:45 PM
Hello Tom,
Probably those handful of users that cannot be reset have higher Roles as Admin or Audit and therefore you cannot change them.
01-29-2014 03:31 PM
Hmm, we checked his roles and indeed he has the Helpdesk role and the other user has no roles. Funny thing too we just noticed is that this particular Helpdesk tech cannot modify other Helpdesk techs PINS, but they *can modify his..
01-29-2014 02:52 PM
Hello
Can you please check the user privilleges and try Assign system administrator role for the account to allow the reset/modify the operation .
Br,
Nadeem
01-29-2014 03:32 PM
Hi Nadeem, unfortunately we cannot assign him systems admin role, he's with our helpdesk group. My account as a system admin has not issues resetting users PINs.
01-29-2014 03:37 PM
Hi Tom,
Check some of these out:
Some existing bugs> CSCtn59526 CUC - Account with User Administrator role cannot delete users CSCtd45141 Cisco Unity Privilege Escalation Vulnerability CSCsl92087 (registered customers only) —CUC 2.0 Helpdesk Administrator Role does not allow user to unlock accounts
#DavvID
01-30-2014 12:52 AM
look like to me issue with this , an DDTs was opened to addressed to Vulnerability, may that's the reason HELPDESK not able to change the same. there is no workaround to this.
Cisco Unity Privilege Escalation Vulnerability
Br,
Nadeem
Please rate all useful post.
01-30-2014 12:18 PM
Awesome thank you everyone for your response.
A somewhat related question:
Of the roles in CUC 8.6:
Audio Text Admin
Audit Admin
Greeting Admin
Help Desk Admin
Mailbox Access Delegate
Remote Admin
System Admin
Technician
User Admin
Which of these roles can a Helpdesk Admin role user be able to change their PINs?
Thanks!
Tom
01-31-2014 10:02 AM
Hi Tom,
If you check the guide the Help Desk is more than enough to change PIN's, however there is a catch, you cannot change them for users that have higher privileges otherwise it would be a Privilege Escalation:
Some existing bugs> CSCtn59526 CUC - Account with User Administrator role cannot delete users
CSCsl92087 (registered customers only) —CUC 2.0 Helpdesk Administrator Role does not allow user to unlock accounts
You mentioned "for almost all users save for a handful", due to the escalation issue this would be expected unless you assign the Help Desk role the same or higher privileges than of those who they are wishing to change.
#DavvID
01-31-2014 12:07 PM
David,
Thanks for the response.
So how can we assign the Help Desk role higher privileges than the User Administrator and Greetings Administrator roles?
Thanks,
Tom
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide