Roles

Training Video

Concept

Users, devices, teams and even locations can be assigned one or more roles. Roles themselves can be assigned with functions and permissions, which can be used to control telephony relevant tools such as, for example, whether or not a user is permitted to pickup calls from other users.

Roles are set up under Users > Roles.

A special All Users role is available which is assigned to all users, devices, teams and locations per default.

A common use case (and our recommendation) is to create a role per department or team. For example, it is often wished that a user can only pickup and see calls in the pascom client that are from within their own department. To do this, simply remove the xmpp.group property from the All Users role and assign it to a new role e.g. Support and make all support employees members of the role group.

The Role “All”

By default, every pascom telephone instance has a permanently implemented role called “All”. This role cannot be removed. However, you can adjust them that they no longer contain permissions or assignments.

The role “All” should make it easier for beginners to deal with user roles and, by default, enables the visibility of users and teams in the pascom clients

Creating Roles

Roles can be found under Users > Roles.

To create a role, click the Add.

Provide the role with a name which corresponds to the intended role assignment or function / permission. Optionally, under the Description field you can also enter additional relevant information which provide insight into the purpose of the role.

Activate automatic assignment

In the base settings of each role, you have the option of having assignments carried out automatically. This is a great feature to significantly reduce maintenance.

A role can automatically assign users, teams, locations and devices.

How does it work exactly?

If you activate a setting for automatic assignment, the corresponding tab disappears from the tab bar and the assignment is made automatically.

example:
If you activate the automatic assignment of users, all existing users on the pascom telephone system, are assigned to this role .

If you deactivate a setting for the automatic assignment, the corresponding tab appears again in the tab bar and you can manually assign the corresponding elements to the role.

The Role Types explained

Roles can have one or more role types, also known as permissions, added to them. Each role type offers differing functionality.

Now you can assigned users, teams, devices and / or locations to your newly created role - depending of course what the defined role type affects.

Example Usage

Visibility in the Client

Should you wish to make teams visible in the Desktop and Mobile Client, a role with the role type xmpp.group is required.

Example:
Under Users > Roles > Add add a new role with the name “Support-Team”.
Under the Role types tab, add the xmpp.group role type to the role.
Under the Users tab, add all “Support” users.
Under the Teams tab, add the “Support” team.
Click Save and apply the changes. Now all support users will see their own “Support Team” contact list within the pascom client and under the contacts filter drop down “Teams”, the “Support” queue will also be visible.

Should you wish to see who is calling with whom within the client, then you will need to the set the sys.xmpp.properties.roster.shownumbers property setting to “true” within the pascom phone system web UI. (Available since pascom 17.08)

Pickup

In principle, every user can use the /*8 code to pick up calls from any other user at least until a role with the role type “pcikup.group” has been added. From this point, the pickup permissions must be explicitly defined.

Within a team, it is possible to determine which employees receive inbound call pascom client pickup notifications.

If the Team pickup configuration options are not able to include all to be permitted users, you will need to create a pickup group.

With a pickup role with the type pickup.group it is also possible to configure users to be able to pickup incoming external and internal calls from one another.

Example:
Under Users > Roles > Add add a new role with the title “Pickup Group”.
Under the Role Type tab, add the type pickup.group to the role.
Under the Teams tab, assign the desired team.
Under the Users tab, assign the desired users.
Click Save and apply the changes.

Finally, you can specify in the Team to which the pickup role belongs, that the pickup group should be used as the control option.

Penetrate Call Forwards

If user ‘A’, despite a call forwarding being activated wishes to directly reach internal user ‘B’ without the call forwarding coming into affect, a role with the role type redirect.choice is required. Each user with this role breaks through (penetrates) the call forwarding rule and will be put directly through to the selected extension.

Example:
Under Users > Roles > Add add a new role with the title “Boss Redirect”.
Under the Role types tab, add the role type redirect.choice to the role.
Under the Users tab, add the user “Boss”.
Click Save and apply the changes.
Now the user “Boss” can always directly reach any user despite any active call forwards.

TAPI

Should you wish to use the pascom TAPI under your windows environment, then a separate role is required.

For this purpose, create a role with the role type xmpp.supervisor and in the case of a Terminal Server scenario, assign a user via which telephony should be managed.

Example:
Under Users > Roles > Add add a new role with the title “TAPI-User”.
Under the Role types tab, add the role type xmpp.supervisor to the role.
Under the Users tab, add the user “Superuser”.
Click Save and apply the changes.

Flexible Workstations / Locations

Should your employees not have fixed permanent workstations within your company or certain employees regularly change their work locations (e.g. branch locations or HomeOffice) it is advisable to not assign the corresponding pascom phone system devices directly to the users but rather to a Location.

Per default, each pascom phone system user can log into any location. Should you wish to prevent this and only allow users to certain locations, a role with the role type location.group is required.

This configuration is necessary for each user wishing to flexibly user different locations.

Example:
Under* Users > Roles > Add add a new role with the title “Location Office Internship”.
Under the Role types tab, add the role type location.group to the role.
Under the Users tab, add the user “Office Intern”.
Under the Locations tab, add the available / permitted locations.
Click Save and apply the changes.
Now the user “Office Intern” can only log into the assigned locations.

Setting Call Forwards

If a user should have the permission to set call forwards for other users using Function Codes, a role with the role type redirect.group is required.

Example:
Under Users > Roles > Add add a new role with the title “Call Forwarding”.
Under the Role Types tab, add the type redirect.group to the role. Under the Users tab, add the user “Secretary”.
Click Save and apply the changes.

Now the user “Secretary” will have the ability to use the function codes to set up call forwarding for other users. For example, should it be necessary, to set up a forwarding to the central switchboard (ext. 100) for the user with the extension 15 they can use the function code *7415#100.

Personal client profiles

If a user is to have the right to manage their own client profiles, a role with the profile.personal role type is required. This allows members with this permission to create, edit and delete client profiles. Users without this role type can only use the default profiles in the pascom client.