GSM and DB Security Required?

[kenjohnson]

Another question on GSM - downloaded the current GSM (1.0.10).

Was gogin to try to deply it to one of our users who is not a full Unity admin - but is COS'ed into most admin groups (i.e. add subscribers, deleeted, call ahandlers, etc).

It is giving a login erro on the Unity Server selection screen (which I assume is a database login?)

Does the user have to be a full admin to use GSM or are there some other things I can look at for why he might get this error (i.e. is there a way to activate GSM (perhaps read-only rights on the DB) without giving full Unity access to the box...

Thanks!

Ken Johnson

Mgr. Network Services

LeTourneau University

http://www.letu.edu

CIPTUG, Cisco IP Telephony Users Group

http://www.ciptug.org

[lindborg]

To run GSM you need to be logged in as a user who has read access to the UnityDB database in SQL on at least one Unity server in your network - by default the local administrator's group is the only one with such rights but you can add additional groups or individual users to have this right directly in the enterprise manager (we have permission to install enterprise manager even with MSDE installations for just such purposes).

All GSM is going is reading the SQL database on Unity server you point it at to get information about all other Unity servers and subscribers in the entire organization. It then just launches the SA to that user on that server so the user running GSM would also need to have SA admin rights on each box you want them administering users on - GSM at this point is out of the picutre, it just launches the page and from there the permissions are enforced by the SA as normal.