Admin Rights with MS365 and 3CX

[soft3]

Since upgrading to v18 there is a loss of access to M365 settings for users granted phone and system admin. https://www.3cx.com/community/threads/extension-with-admin-rights-can-no-longer-control-micr-365-in-v18.85082/ Only workaround is to give out our global super admin login to the client – this defeats the purpose of creating admin accounts for self-management if M365 is ever integrated. Solution is sort out security issue of being able to self-elevate using SSO, or allow the admin to specify an AD sec group so the users can be managed with the MS365 tenant.

Wondering if the Groups that are coming for both Dedicated and StartUP will address this issue?

 

[Charles_3CX]

Please note that this feature was removed in version 18 due to the addition of the SSO features, which will allow users logging in to the management console, with an extension, to add themselves as admins and then by logging in with the SSO account have full access to the system, which poses a security risk and thus removed. Therefore Only the super admin account has access to Microsoft 365 integration tab.

 

[accentlogic]

@Charles_3CX This is good to know, thanks. We cloud host 3CX for quite a few larger clients, and would like at least one of their extensions to have super admin rights using their extension login and/or SSO. We host it, and provide escalation support, but often they do all their own system configurations and handle the 365, Google or CRM integrations.