CUCM Role and Access Control Group

[ciscostudent21]

Is is possible to create a CUCM Role and Access Control Group that does the following:

Allow the adding Phones
Allow the updating of Device and Line Settings
Allow the deletion of Phones
Allow the associating Directory Numbers to Phones
DOES NOT allow for the deletion of Directory Numbers

I have tried to use the "Standard CCM Phone Management" role, but this does allow for the deletion of Directory Numbers. We are attempting to setup a environment where our support staff can add/delete/modify phones, but CANNOT delete DNs. I am running CUCM 10.5.

Thanks!

[Suresh Hudda]

No, it is not possible. 

Suresh

[Jaime Valencia]

CUCM's granularity for roles only goes like this:

User cannot access the page

User has view only permission on the page.

User can view the page, and do everything (add / delete / modify)

You cannot prevent them from doing any kind of change if they have full access to a page, just as you cannot limit the options they would get to a subset of what you have configured, to just use/see a subset of users, etc.