Cisco Cisco Prime Collaboration Assurance 11.5 White Paper
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 16 of 33
Best Practice 3: User Roles
Initially, for each domain, set up one or more users with the ordering role at a minimum. If you use the preset
workflow roles, which are the defaults in the product,
you don’t need to assign other roles, because workflow
performs activation automatically. Giving only the ordering role allows users fixed functions. The administrator can
provide more access after the users become familiar with the system. Table 2 lists user roles.
Table 2.
User Roles
User Type
User Roles
Rights
Global
Administration
Maintenance
Maintenance
Full rights (except maintenance)
Configure system cleanup activities
Configure system cleanup activities
Domain-specific (users with
these roles can perform only
authorized tasks within their
assigned domain)
these roles can perform only
authorized tasks within their
assigned domain)
● Policy infrastructure configuration management
● Ordering
● Advance assignment
● Approval
● Assignment
● Shipping
● Receiving
● Ordering
● Advance assignment
● Approval
● Assignment
● Shipping
● Receiving
● Manage phone inventory, create new user types,
and set phone button templates
● Authorize granular control over management of
infrastructure products for nonglobal users
● Place orders with all ordering privileges along
with the ability to assign MAC at time of order
● Approve or reject orders
● Assign phone (MAC address) to an order
● Help ensure that the equipment is sent before
● Assign phone (MAC address) to an order
● Help ensure that the equipment is sent before
order processing continues
● Help ensure that the equipment is received
before order processing continues
●
Users
People who use IP telephony services provided by the Cisco Unified Communications System (that is,
people who have phones, lines, voicemail accounts, and so on).
User roles define the products and services that can be provisioned for a user.
User roles (refer to the User Guide for Cisco Prime Collaboration Provisioning for details):
●
Employee
●
Executive
●
User-role types can be modified in a global template or on a per-domain basis. You can customize the
products and product bundles associated to a user role. For example, you can configure the employee user
role to provision only phones of type (Cisco Unified IP Phone) 7961.
●
You can create additional customized user roles in Cisco Prime Collaboration Provisioning.
If Cisco Prime Collaboration Provisioning self-care mode is enabled, users can change their phone, line,
and user settings such as voicemail PINs by themselves. Self-care can be enabled at the domain level so
that all users in a domain have the self-care feature.
●
Business rules
Cisco Prime Collaboration Provisioning contains a predefined set of business rules that control processing
of orders, and default values for various objects. Rules can be set per domain or in a global template
assigned to all new domains.
●
Workflow rules (refer to the User Guide for Cisco Prime Collaboration Provisioning for more details):
◦ IsAuthorizationRequiredForAddOrder
◦ IsAuthorizationRequiredForCancelOrder
◦ IsAuthorizationRequiredForChangeOrder
◦ PhoneAssignmentDoneBy