Nortel Networks NN10043-113 manual Understanding provisioning roles and rights

[Standard - Nortel Networks Confidential]

Chapter 2 Administration Overview 15

Understanding provisioning roles and rights

Administrators can create, or define, all the necessary provisioning roles to support their system. They can allow or restrict provisioning roles to carry out specific actions. The following table provides examples of several administrator provisioning roles and the rights based restrictions associated with various provisioning tasks.

Table 2 Example of roles and rights

Provisioning
Role example	Rights given		Allowed tasks
User	• User management with read,		Can view domain details, and add,
administrator		write, and delete access	delete, or modify users. Does not
	•	Domain management with	have access to other parts of the
			system, for example voice mail,
		read access only
			service packages, and so forth.
Device	•	Domain management with	Cannot add or modify users.
administrator		read access	Allowed to add, modify or delete
	• Device management with read,		devices.
		write, and delete access
System	•	Full domain access	Can see all domains, regardless of
Administrator			who created the domain, or the list
			of domains provisioned against the
			administrator.

Limiting access to a domain

Complementing the rights-based restrictions, administrators can be provisioned against certain domains in order to limit access to within those domains. This prevents an administrator from domain xyz from viewing or modifying details in domain abc, even though they are hosted from the same system. Administrators can then delegate work for subdomains to other administrators without giving them access to their own data.

SIP Provisioning Client User Guide