CUCM Role Level 1 Help Desk

[IP_Cartel]

Is there a way to only allow visibility to the Device > Phone and User Management > End Users?

I setup an account with these Access Control Groups:

Standard CCM read only
Standard CCM feature Management
Standard CCM Phone Management
Standard CCM User Management
Standard CCMUser Administration

It can see System, Call Routing, Media Resources, Adv Features, Device, Application, User Management, Bulk Admin.

We dont want level one to see our other configurations in the environment.

[Roger Kallberg]

No that is not possible. The user will have visibility of all objects in CM, but only read access to parts not explicitly granted additional access to.

[Jonathan Schulenberg]

There is no way to hide menu or their options; however, you can create a new Role  & Access Group to limit the individual pages/options they can access. Everything else will return an access denied page if they attempt to click on it.

[IP_Cartel]

thanks. is there an article how to do this?

[Jonathan Schulenberg · Accepted solution]

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/12_5_1SU1/adminGd/cucm_b_administration-guide-1251SU1/cucm_b_test-adminguide_chapter_010.html#CUCM_TK_A50F814F_00

[IP_Cartel]

This is what I was looking for.  It is possible.

Go to User Management à User settings à Access Control Group

Open Standard Phone Administration

Click on Copy and enter the name of the new access group, for example : Phone Admin Access Only

Now open the new Access Control Group you just created and under related link in the top right corner choose the option of Assign Role to Access Control Group.

Here select Standard CCMADMIN Read Only and click on Delete Role Assignment.

Click on Save.

Now go to User Management à End User

Add a new use with the user name and password.

Under the section where it says Permissions Information Click on add to Access Control Group and add the new Access group you just created using the steps above.

Click on save.

And that should be it.

You now have a user that can only add phones, edit phone config and line config.

All other options will show up as follows :