Solved 3CX v16 - extension with admin rights not visible in mngmt console when logged as another extension with admin rights

[jhn]

Hi,
slight issue with 3CX v16.0.0.1581.

User extension A and user extension B are both configured with admin access to 3CX management console (allow access to mngmt console, manage all extensions, administer sip trunks, genera system administrator, generate call reports, allow downloads of call recordings - all of these enabled).

Extension A logs into management console, goes to menu Extensions and can't see extension B in the list.
When logged on as phone system admin user (the one created during installation), all extensions are visible.

There seems to be an issue - sure user extension with admin rights can't grant / modify admin rights for another user extension. That's fine, been like that for long time. But definitely, the other admin extension should be visible and should be allowed for normal config changes (update e-mail address, configure fwd rules, etc.)

Is this known issue which is going to be fixed?

Thanks!
Jakub

 

[JohnS_3CX]

Hi Jakub,

If as a user-extension you have elevated rights, you can manage users below your elevation level only.

If you need to be able to manage everyone then you need to be at the highest lever (logging in as a PBX admin rather than a user extension)

 

[Jason Hayes]

Hi Jakub,

If as a user-extension you have elevated rights, you can manage users below your elevation level only.

If you need to be able to manage everyone then you need to be at the highest lever (logging in as a PBX admin rather than a user extension)

Hi. Isn't this what the "Manage All Extensions" option is for? This is a bug which has just started to appear in V16. See https://www.3cx.com/community/threads/v16-extension-missing-within-manage-console.64275/ There is no reason and is a seecuirty risk that you are saying we have to sign in with the PXB Admin username and password!

 

[atvantage]

Agreed. We keep the full admin to ourselves and give the main contact at our clients the other rights so that they can manage extensions and other functions. We also have other managers that we give rights to the admin console for reports and call recordings. The change makes it impossible for the extension manager to fully manage the extensions without giving them the main admin login which also has functionality that we don't want the extension manager to have.

 

[JohnS_3CX]

To clarify, the only restriction is that extensions with "System Management" options defined, cannot view/modify other extensions with similar rights.

If these extensions are assigned to people who act like managers, then they can manage their own profile anyway and does not mean that their whole global management rights are affected. They are only barred from managing other managers.

There is even the option to create a dummy extension with only specific access rights for specific use (i.e. recordings or reports). In this case your personal extension can still be managed by people with higher elevation (if this is needed), and you still get to have access to the specific functions you want via the dummy extension.

 

[atvantage]

I understand What you're saying and I'm even OK with them not being able to manage the other manager's extensions. My main concern is that they can't even see that the other Manager extensions exist. The simply don't show up in the extensions list.

As far as the Dummy extension, While this would work, it introduces a level of confusion for department managers that aren't always highly technical having to use 2 different logins depending on what they are trying to do.

In Previous versions user's with "System Management" options defined couldn't give other users those rights but if they had the "Manage All Extensions" option selected they could still see the other extensions. This has changed in V16.