That is not entirely correct. CUCM (and thus implicitly IM&P, as more recently they have been integrated) requires a user with AXL API access rights. There is a standard Role for it, but not a Standard access group that is delimited to only this. However you can do one group with only this role in it and add your limited CUCM end-user to only this group.
There is probably something similar for Unity as well, but unfortunately I have no unity/VCS/Expressway setup on hand right now to test this. Looking at roles in Unity I would hazard a "remote administrator" role may be the one.
This user is really only used to query members of a cluster from the publisher. For CUCM & IM&P this is an AXL query, for Unity (if I'm not mistaken) it's based on the REST API.
Once the servers have been queried, this user is not actively used in day to day operations (you can delete it or change its password and services would keep to function as before, but if for any reason the servers would need to be refreshed again, that would fail of course)
... View more
The following HTML code embedded in a web page should do the trick:
<a href="ciscojabber://provision?ServicesDomain=service-example.com&VoiceServicesDomain=voiceServicesDomain.com">Follow this link to launch Cisco Jabber for the first time</a>
It will show a text link (change the text as you see fit) and will provision services domain as service-example.com and voice services domain as voiceServicesdomain.com
Keep in mind, that this method works only for mobile and OSX clients, it will not work for Jabber for Windows clients (those can use customized installer command line or bootstrap file for the same effect)
... View more