Limiting Access to Call Recordings Without Granting Full Manager/Admin Rights

[rickUCUK]

Hi all,

We're currently trying to provide a few specific users with access to call recordings for certain departments within our organization. However, from what I've found so far, the only way to accomplish this appears to be assigning the Manager role to those users and adding them to the appropriate department.

Unfortunately, this approach raises a number of security concerns. The Manager role doesn't just grant access to call recordings—it also provides broader administrative privileges, including:

• Access to the Admin Console
• Ability to create/delete user accounts
• Viewing the event logs
• And other permissions outlined here: 3CX Access Roles Documentation

For obvious reasons, we’d prefer to avoid giving users this level of access if all they need is the ability to review call recordings.

Does anyone know of a workaround or more granular permissions setting that would allow access only to call recordings—ideally restricted by department—without enabling full manager capabilities?

We're running a 16SC Enterprise license, if that has any bearing on what's possible.

Any advice or insights would be greatly appreciated!

Thanks in advance,

 

[network11]

Have the same issue. In the clients case a user is a member of 3 departments but manager of only 1 department and needs access to only that departments recordings.

Also don't want this department manager to have access to Admin functions on the PBX.

There needs to be a department manager role or add recording access to department administrator and ensuring they can only access recordings for the department they are set as primary department on their profile.

 

[Phil-TIC]

I agree, it’s a real headache every time we want to provide limited access to call recordings.
The “manager” role gives access to all recordings from all users in every department the manager belongs to.
So if a department head needs access to their team’s recordings, and a director is included in the same department (just to access those recordings too), the department head has access to the director’s recordings as well.

I’m honestly surprised this hasn’t been fixed yet… it’s a significant limitation.

 

[KyriacosS_3CX]

For on-prem deployments Admin functions can be restricted by limiting the IPs via Console Restrictions.

For the rest there is some granularity available via the Users->View, which got a bump in U6.