Lucent Technologies 5 manual Authorization Codes

MERLIN LEGEND Communications System Release 5.0	Issue 1
System Manager’s Guide 555-650-118	June 1997

4Features and Applications

Features Page 4-46

!SECURITYlALERT:

The MERLIN LEGEND Communications System ships with ARS activated with all extensions set to Facility Restriction Level 3, allowing all international calling. To prevent toll fraud, ARS Facility Restriction Levels (FRLs) should be established using:

■FRL 0 for restriction to inside calls only

■FRL 2 for restriction to local calls only

■FRL 3 for restriction to domestic long distance (excluding area code 809 for the Dominican Republic as this is part of the North American Numbering Plan, unless 809 is required)

■FRL 4 for international calling

■Each extension should be assigned the appropriate FRL to match its calling requirement. All voice mail port extensions and barrier codes not used for outcalling should be assigned to FRL 0 (the default setting in Release 3.1 and later).

Authorization Codes 4

Authorization codes are passwords that allow users to apply the calling restrictions of their own extensions when they want to make a call using a more restricted extension.

Using system programming, you can assign one authorization code of 2 to 11 characters for each extension. While each authorization code must be unique, more than one user can use an authorization code simultaneously, for example, to set up a conference call. For optimal security, you should use the longest possible barrier codes (11 characters).

The following issues should be considered when you assign or modify authorization codes:

■The assignment of authorization codes depends on your company’s culture and how system calling restrictions are assigned. For example, you may choose to assign authorization codes only to top-level executives who have a high level of calling privileges or to users who move around the company throughout the day rather than sitting at their own desks.

Or, if there are several phones with little or no outside calling privileges, for example, in common areas used by the public, you may choose to assign authorization codes to all users so they can use those phones if they need to.

■Authorization codes interact with other system features. For example, if the user’s own extension is assigned Forced Account Code Entry, the user must enter an account code after entering the authorization code.