01-30-2014 12:27 PM - edited 03-16-2019 09:32 PM
Hello Everyone,
Question:
Which other roles does a user who has the Helpdesk role be able to change their password/PIN? For example we know a Helpdesk role user cannot change the password of other Helpdesk role users nor System Admin role users.
Roles in CUC 8.6:
Audio Text Admin
Audit Admin
Greeting Admin
Help Desk Admin
Mailbox Access Delegate
Remote Admin
System Admin
Technician
User Admin
Thanks!
Tom
Solved! Go to Solution.
02-07-2014 05:42 AM
The version I have tested with is 8.6.1.20006-2 and you're just 1 update away from the latest 8.6 version. I would have to assume that this is not a bug but instead it's how Cisco wants it to work. I would reach out to TAC and see if there is a way to either, modify the HD Admin role or provide you with a special update to change this functionality.
HTH
Regards,
Yosh
02-04-2014 10:33 AM
Bump.
Anybody?
02-04-2014 11:21 AM
You want to know which other roles aside from the "Help Desk" role is allowed to change users password/pin but is also limited in performing other changes?
HTH
Regards,
Yosh
02-04-2014 11:49 AM
Hello Tom,
I believe you asked this question a couple of days ago, and you do not want to add the System Role administrator.
02-04-2014 02:15 PM
Yes I did ask this a few days before and no we do not want to give Helpdesk Technicians the Systems Administrator role.
THIS Question however is different. What we want to know is ... for example if a user is a greetings administrator, will our Helpdesk Technician (having the Helpdesk role) be able to reset his/her PIN?
Does my question make sense or am I talking duck?
Thanks,
Tom
02-05-2014 10:33 AM
The Helpdesk will be able to reset the PIN.
HTH
Regards,
Yosh
02-05-2014 10:41 AM
Thanks for the responses.
If this is correct then that means there's something else going on here, because our Helpdesk Tech cannot reset users with Greeting Admin role, nore Helpdesk/Systems Admin roles...
If you guys have any idea possibly why and could send us troubleshooting in the right direction, we'd really appreciate it.
If not thanks again for your help.
-Tom
02-05-2014 10:53 AM
Does your "Help Desk Administrator Roles" look like this:
HTH
Regards,
Yosh
02-05-2014 11:00 AM
Hi Tom,
I think the only way we'll know for sure how this works is by some
more in depth testing.
I thought this was an interesting question so I took one of my test users
and made him a Helpdesk admin (role) and took another and made him
a Greetings admin (role).
My tests were exactly like yours - the Helpdesk admin role could not reset
the PIN for the user who had the Greetings admin role. Once I removed the
Greetings admin role then the PIN could be reset from the Helpdesk admin user.
Is there another we should test?
Cheers!
Rob
"Seek it out and ye shall find "
- OneRepublic
02-05-2014 11:05 AM
This is interesting...
I tried initially with CUC 7.0.1 and the Help Desk user was able to successfully reset a Sys Admin and or Greeting Admin password/PIN.
I tried the same thing with CUC 8.6 and now I get the message "Unathorized"
The funny thing is that the "Role Privileges" haven't changed between versions.
HTH
Regards,
Yosh
02-05-2014 11:11 AM
Thanks for verifying Yosh!
+5 for this! I guess this does vary from version to version
so Tom will have to test on his specific CUC build There
were some "escalation" bugs in the earlier CUC versions.
Cheers!
Rob
"Seek it out and ye shall find "
- OneRepublic
02-05-2014 11:14 AM
+5 Rob you always go above and beyond
HTH
Regards,
Yosh
02-05-2014 02:48 PM
Awesome thank you guys. Yes we're running 8.6.
Try having two Helpdesk role users reset each other and have them try to reset a Sys Admin role. Should all be Not Authorized.
02-06-2014 01:49 PM
Last question. Do you guys know if there's a patch in 8.6 that fixed this?
Thanks.
02-06-2014 02:10 PM
What exact version of 8.6 are you running?
Regards,
Yosh
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide