Permissions

Training Video

Concept

Users, devices, teams and even locations can be assigned one or more permissions. Permissions themselves can be assigned with functions and roles, which can be used to control telephony relevant tools such as, for example, whether or not a user is permitted to pickup calls from other users.

Permissions are set up under Users > Permissions.

A special All Users permission is available which is assigned to all users, devices, teams and locations per default.

A common use case (and our recommendation) is to create a permission per department or team. For example, it is often wished that a user can only pickup and see calls in the pascom client that are from within their own department. To do this, simply remove the xmpp.group property from the All Users permission and assign it to a new permission e.g. Support and make all support employees members of the permission group.

The permission “All”

By default, every pascom telephone instance has a permanently implemented permission called “All”. This permission cannot be removed. However, you can adjust them that they no longer contain permissions or assignments.

The permission “All” should make it easier for beginners to deal with user permissions and, by default, enables the visibility of users and teams in the pascom clients

Creating permissions

permissions can be found under Users > permissions.

To create a permission, click the Add.

Provide the permission with a name which corresponds to the intended permission assignment or function / permission. Optionally, under the Description field you can also enter additional relevant information which provide insight into the purpose of the permission.

Activate automatic assignment

In the base settings of each permission, you have the option of having assignments carried out automatically. This is a great feature to significantly reduce maintenance.

A permission can automatically assign users, teams, locations and devices.

How does it work exactly?

If you activate a setting for automatic assignment, the corresponding tab disappears from the tab bar and the assignment is made automatically.

example:
If you activate the automatic assignment of users, all existing users on the pascom telephone system, are assigned to this permission .

If you deactivate a setting for the automatic assignment, the corresponding tab appears again in the tab bar and you can manually assign the corresponding elements to the permission.

The permission Types explained

Permissions can have one or more permission types, also known as roles, added to them. Each role type offers differing functionality.

Now you can assigned users, teams, devices and / or locations to your newly created permission - depending of course what the defined role type affects.

Example Usage

Visibility in the Client

Should you wish to make teams visible in the Desktop and Mobile Client, a permission with the role type xmpp.group is required.

Example:
Under Users > permissions > Add add a new permission with the name “Support-Team”.
Under the Role types tab, add the xmpp.group role type to the role.
Under the Users tab, add all “Support” users.
Under the Teams tab, add the “Support” team.
Click Save and apply the changes. Now all support users will see their own “Support Team” contact list within the pascom client and under the contacts filter drop down “Teams”, the “Support” queue will also be visible.

Should you wish to see who is calling with whom within the client, then you will need to the set the sys.xmpp.properties.roster.shownumbers property setting to “true” within the pascom phone system web UI. (Available since pascom 17.08)

Pickup

In principle, every user can use the /*8 code to pick up calls from any other user at least until a permission with the role type “pcikup.group” has been added. From this point, the pickup permissions must be explicitly defined.

Within a team, it is possible to determine which employees receive inbound call pascom client pickup notifications.

If the Team pickup configuration options are not able to include all to be permitted users, you will need to create a pickup group.

With a pickup permission with the type pickup.group it is also possible to configure users to be able to pickup incoming external and internal calls from one another.

Example:
Under Users > permissions > Add add a new permission with the title “Pickup Group”.
Under the Role Type tab, add the type pickup.group to the role.
Under the Teams tab, assign the desired team.
Under the Users tab, assign the desired users.
Click Save and apply the changes.

Finally, you can specify in the Team to which the pickup permission belongs, that the pickup group should be used as the control option.

Penetrate Call Forwards

If user ‘A’, despite a call forwarding being activated wishes to directly reach internal user ‘B’ without the call forwarding coming into affect, a permission with the role type redirect.choice is required. Each user with this permission breaks through (penetrates) the call forwarding rule and will be put directly through to the selected extension.

Example:
Under Users > permissions > Add add a new permission with the title “Boss Redirect”.
Under the Role types tab, add the role type redirect.choice to the role.
Under the Users tab, add the user “Boss”.
Click Save and apply the changes.
Now the user “Boss” can always directly reach any user despite any active call forwards.

TAPI

Should you wish to use the pascom TAPI under your windows environment, then a separate permission is required.

For this purpose, create a permission with the role type xmpp.supervisor and in the case of a Terminal Server scenario, assign a user via which telephony should be managed.

Example:
Under Users > permissions > Add add a new permission with the title “TAPI-User”.
Under the Role types tab, add the role type xmpp.supervisor to the role.
Under the Users tab, add the user “Superuser”.
Click Save and apply the changes.

Flexible Workstations / Locations

Should your employees not have fixed permanent workstations within your company or certain employees regularly change their work locations (e.g. branch locations or HomeOffice) it is advisable to not assign the corresponding pascom phone system devices directly to the users but rather to a Location.

Per default, each pascom phone system user can log into any location. Should you wish to prevent this and only allow users to certain locations, a permission with the role type location.group is required.

This configuration is necessary for each user wishing to flexibly user different locations.

Example:
Under* Users > permissions > Add add a new permission with the title “Location Office Internship”.
Under the Role types tab, add the role type location.group to the role.
Under the Users tab, add the user “Office Intern”.
Under the Locations tab, add the available / permitted locations.
Click Save and apply the changes.
Now the user “Office Intern” can only log into the assigned locations.

Setting Call Forwards

If a user should have the permission to set call forwards for other users using Function Codes, a permission with the role type redirect.group is required.

Example:
Under Users > permissions > Add add a new permission with the title “Call Forwarding”.
Under the Role Types tab, add the type redirect.group to the role. Under the Users tab, add the user “Secretary”.
Click Save and apply the changes.

Now the user “Secretary” will have the ability to use the function codes to set up call forwarding for other users. For example, should it be necessary, to set up a forwarding to the central switchboard (ext. 100) for the user with the extension 15 they can use the function code *7415#100.

Personal client profiles

If a user is to have the right to manage their own client profiles, a permission with the profile.personal role type is required. This allows members with this permission to create, edit and delete client profiles. Users without this permission type can only use the default profiles in the pascom client.