Group manager can add extensions. Is this correct?

[greychain]

I have created a group manager and it does what I expect but also does something I did not expect. The group manager can add extensions. Is this expected behaviour? Is there anyway I can stop this or limit it to a range of extensions?

 

[Alphabetic]

Are you talking about extension groups?

How is this manager adding extensions? If they're doing it from the management console then it isnt the group manager permission letting them do that.

 

[greychain]

I created a group and allocated a manager. Then I logged in as that manager and had two options on the left menu, Extensions and Groups. When I went to Extensions I had the option to Add .

I tried this and could.

I could only see the extensions that were in my group.

 

[JohnS_3CX]

Hi,

There are two parts in the Rights tab of the extension you delegated as a Manager under a specific group.

The 2nd part says "allow access to the management console". If you disable that, they can no longer add/remove extension. This is unrelated to being a group manager - this is clearly managment console login rights and exists independently of the above.

 

[greychain]

Yes I checked that option and it wasn't set

 

[greychain]

I just checked my settings again and I have allowed access to management console and allowed to manage extensions in the groups i'm part of. Just dont expect I can create new extensions.

 

[JohnS_3CX]

I'm a bit confused, are you saying you logged into the management console as an extension (ie. 100, not as admin) even though you don't have this ticked?

 

[greychain]

 

[greychain]

I want to be able to manage the extensions in my group for things like change status/password etc. Not to be able to create new ones

 

[JohnS_3CX]

I just checked my settings again and I have allowed access to management console and allowed to manage extensions in the groups i'm part of. Just dont expect I can create new extensions.

I see, in this case then you granted them the right to manage extension in the group they belong to.

Manage extension does include adding and removing - this right comes with the ability to edit extensions and it cannot be removed.

If you want to change the status only (not affecting passwords) you can do it from the Webclient instead by granting the user Receptionist rights.

For passwords you will need the above we discussed, so you can regenerate new passwords

 

[greychain]

OK thanks, so this is normal and expected behaviour. Seems a bit haphazard.

I want to block calls from one department to the next so am using the extension forwarding rule to drop any calls from one range of extensions to the other. So the ability to create an extension in the other departments extension range is not desirable.

I have tested it a bit more.

If the manager extension is a manager in 2 groups the new extension is only created in the first group and there is no choice of any other groups that he is a manager for.

 

[JohnS_3CX]

Extensions can be assigned to any group of course (by accessing the Groups tab) but if the person with MC rights does not have full access, they will not be able to edit it.