# User Authorization Profiles

## Purpose

The User Authorization Profiles form allows you to create, modify, and delete user profiles which are required to access the following MiVoice Business management interfaces:

- System Administration Tool

- Group Administration Tool

- Desktop Tool

Use this form to modify or create a small number of user profiles. If you have a large number of user profiles to add, or a wide variety of user profile details to change, use the User and Services Configuration form (see Create Profiles with the User and Services Configuration Form).

Use this form when performing the following tasks:

- Create Profiles with User Authorization Profiles Form

- System Access Authorization

- Creating Admin Policies

## Conditions

- Mitel Performance Analytics (MPA) uses "system" user credentials to access MiVoice Business for data collection. If you update the "system" user password in MiVoice Business (cMiVB), ensure that you update the password in MPA. Otherwise, MPA locks the System Administration Tool from logging in after multiple failed login attempts.

- The system supports up to five System Administration Tool users, five Group Administration Tool users, and 10 Desktop Tool users at one time.

- The Desktop Tool is only available for users of display IP Phones.

- Only the Root Administrator
  A system administration policy that permits unrestricted access to the MiVoice Business System Administration Tool. Only users logged in to the tool as the Root Administrator have read/write access to all forms and can grant tool access to other users. can program access to the System Administration Tool and use the Import and Export functions in this form. Other administrators can only manage user profiles that do not have System Administrator Tool access rights.

- The User Authorization Profiles form does not perform password strength validation. If the password is not strong enough, the user will be forced to set a proper password at login.

- Users with no associated phone services and with access level other than Desktop (Group Admin, Application or System Admin) are not displayed in the User and Services Configuration (USC) form. As a result,

- If you create a user in this form and apply Group Admin, Application or System Admin access level, that user will not appear in the USC form. When the access rights are removed, the user appears in the USC form.

- If you add any phone services to that user in the USC form, and then apply Group Admin, System Admin or Application access, the user will continue to appear in the USC form (since the user has associated phone services).

- If you create a user with no phone services in the USC form, then apply Group Admin, Application or System Admin access to that user in this form, the user will no longer appear in the USC form.

NOTE: After upgrading to MiVoice Business Release 7.2, all users with no phone services and with access level Group Admin, System Admin or Application will no longer appear in the USC form.

## Field Descriptions

Parameter | Description | Default Value
Search Scope | If Multi-Node Management applications are supported, you can choose to search for an entry in the database of the currently accessed (local) element, or in the databases of all the elements in the Administrative Group. Click the radio button for the local element to search the database of the currently accessed element. Click Admin Group to search the databases of all the elements in the System Data Synchronization Administrative Group. Search results at the Admin Group scope display data only for the Number, Name, and Home Element fields. | Local element
First Name | The user's first name up to a maximum of 64 alphanumeric characters. NOTE: The name in this or the Last Name field must match the name in the Telephone Directory Name field (Lastname,Firstname); otherwise, the User and Services Configuration form and the Group Administration Tool will be unable to display the user profile. | Blank
Last Name | The user's last name up to a maximum of 64 alphanumeric characters. NOTE: The name in this of the First Name field must match the name in the Telephone Directory Name field (Lastname,Firstname); otherwise, the User and Services Configuration form and the Group Administration Tool will be unable to display the user profile. | Blank
PNI | Read only field. Displays the Primary Node Identifier (PNI) of the element or cluster to which this user belongs. |
Number | Read only field. Displays the directory number of the user. |
Department | The name of the department that the user is associated with in the Telephone Directory (for example, Sales). The name can be a maximum of 164 characters. Optional field. | Blank
Location | A name up to 128 characters long that identifies the location of the user device (for example, Tom's desk). If you leave this field blank, then a location will not appear in the Telephone Directory form for this user. | Blank
User Profile Language | Sets the appropriate language for the Group Administration Tool and the Desktop Tool. The System Administration Tool is supported in English only. | English
Login Id | A text string that identifies the person as a registered user. Each ID must be unique and contain a maximum of 256 characters allowed. While adding or modifying a system type user, only ANSI characters are allowed. For non-system type users (e.g. Desktop, etc), you can enter UTF-8 characters. NOTE: If you want to grant access to Server Manager, then same login ID must be added as a user account in the Server Manager. (Not applicable to Container-based MiVoice Business (cMiVB)) | Blank
Password | Password must consist of at least three alphanumeric characters, which will be displayed as asterisks. Note that this field is case sensitive and can include spaces, each counting as a character. A password of only spaces is not allowed. NOTE: If the user is also specified in the Server Manager, then the password for the System Administration Tool and the Server Manager can be same (provided the password meets the criteria for Server Manager) or different. (Not applicable to Container-based MiVoice Business (cMiVB)) | Blank
Confirm Password | The User Profile Password re-entered for confirmation. | Blank
Access | Select a check box to enable access to the associated tool or clear it to disable access.
Desktop | Allows users to access the Desktop Tool for their IP phones. This check box is read-only. It is set in the User and Services Configuration form.
Group Admin | Allows access to the Group Administration Tool.
System Admin | Allows access to the System Administration Tool. Available to the Root Administrator A system administration policy that permits unrestricted access to the MiVoice Business System Administration Tool. Only users logged in to the tool as the Root Administrator have read/write access to all forms and can grant tool access to other users. only.
System Admin Policy Name | Available to the Root Administrator only. Select an Administrator Policy to control the user's access to forms in the System Administration Tool.
Server Manager | Allows users to access to the Server Manager application and displays the Server Manager button in the MiVoice Business tool selection page. (Not applicable to Container-based MiVoice Business (cMiVB)) NOTES: Ensure that Enable access to Server Manager is set to Yes in the Shared System Options form. You must have an administrator access or must be defined in the Server Manager database as a user to open the Server Manager application directly from the MiVoice Business tool selection page. Otherwise, you will be directed to the Server Manager login page to enter your credentials to open the Server Manager application.
Application | Allows access to the MiXML management.
NOTE: For security reasons, Application access also requires the selection of System Admin access. Otherwise, logins will bypass the password strength restrictions specified in the System Security Management form. | Desktop