Cisco Cisco TelePresence Management Suite (TMS) Version 15 Maintenance Manual
How groups and permissions work
Administrators must plan their Cisco TMS deployment in terms of which features and permissions users
need access to in Cisco TMS.
need access to in Cisco TMS.
This is controlled through group membership, group permissions, and system permissions. All permissions in
Cisco TMS are set on a group level.
Cisco TMS are set on a group level.
A user can be a member of multiple groups. Users who belong to more than one group are granted all of the
permissions for all of the groups to which they belong.
permissions for all of the groups to which they belong.
Group membership
There are three ways to add members to a Cisco TMS group:
n
Editing the group itself.
On the
On the
Edit Group
page, click the
Add Members
tab to specify users you want to add to the group. You
can also edit a user's groups going to
Administrative Tools > User Administration > Users
and
editing the user.
n
Assigning the user to a group automatically when the user's profile is created.
Groups set as Default Group are automatically added to any new user that logs in.
Note that after installation, the Site Administrators group is a Default Group, which is what allows the
administrator to log in and start configuring Cisco TMS. See
Groups set as Default Group are automatically added to any new user that logs in.
Note that after installation, the Site Administrators group is a Default Group, which is what allows the
administrator to log in and start configuring Cisco TMS. See
instructions on changing this setting and verifying that only approved administrators are members of this
group.
group.
n
Active Directory Groups.
Cisco TMS lets you import existing groups from Active Directory. Active Directory group memberships
are automatically updated in Cisco TMS groups when the user logs in.
Cisco TMS lets you import existing groups from Active Directory. Active Directory group memberships
are automatically updated in Cisco TMS groups when the user logs in.
Note that it is not possible to manually edit groups created from Active Directory.
System permissions
Permissions in Cisco TMS are a combination of feature permissions and system permissions:
n
User Groups have permissions to control which portions/features of Cisco TMS a user has access to.
n
System Permissions are used to control what a user can do to a particular system. There are default
system permissions, folder permissions that apply to all systems in a particular folder, and individual
system permissions.
system permissions, folder permissions that apply to all systems in a particular folder, and individual
system permissions.
Default permissions are given to a system when first added to Cisco TMS. This is controlled in
Administrative Tools > User Administration > Default System Permissions
, where you can set which
permissions each group gets on newly added systems.
Cisco TMS Administrator Guide (14.1)
Page 23 of 320
Setting up Cisco TMS
How groups and permissions work