Rights - Extension manager - Not allow permissions to Whisper/Listen

[MatejB]

Hello 3CX Community,

We are two admin with role Extension manager. There is our outsource partner which is above us and he is Super Admin (i am not sure of right name of this role, because i was never login in as Super Admin)
Function Whispering/listening works great, but our CEO doesnt like. We have access to set this permission for all extension. But also to us.

On one side we need to manage extensions daily, but on other side we should not be able to set permissions to us which allow whispering/listening. Is there any possibility how super admin can block rights to extension manager to allow whispering/listening on all extension even his?

(the same problem is with recording, extension manager should be not able turnON permissions for records)

 

[JohnS_3CX]

Hi Mate,

There is no option to prevent people from changing that one specific setting.

If you have admin rights it will be available to you to modify.

One thing that you can do, is set the CEO's extension to also be an admin so that other admins will not be able to view it or modify it. Only the super admin will be able to control it from that point onwards.

 

[MatejB]

Thanks for quick answer JohnS.

That is good idea how to protect CEO. But we need also protect other/all users.... even when GDPR is here

This should be a basic security option those days from my point of view.

Do you know if this option setting is planned for future to add it? I believe that more people miss this settings (especialy CEOs)

Thank you anyway for great support and product

 

[JohnS_3CX]

Thanks for the kind words Mate! The main idea is that people with admin rights are trusted to begin with, so they should not have admin rights if they don't meet that requirement.

That being said, it's within our plans to have more detailed rights in the future, but for now this is the only option I can suggest.

The global admin (the one who is not an extension and logs in with the username "administrator" by default) is the only administrator that has access to everything. The rest are not actually administrators, they are extensions that have extra rights delegated to allow them to do certain extra things. With that in mind you might want to reconsider which rights you want to give to who (ie. remove some rights), and use the global admin for more sensitive things.

 

[MatejB]

As you know probably, my problem is, that when global admin take out rights (whisper/listen) from my extension, i am able to turn it ON back.
My Executives trust to us let says, but i understood that they cannot be 100% sure that "somebody" are not listening them. You know, they sometimes talking about sensitive things.... which nobody should hear. And even in case, that some information leak out, we will be (extension managers) first where they look even when we are honest.

We are production - manufacture - company, so in our case is whispering/listening not very useful. Actually we do not need it seriously for our work.

But your answer is enough for now, i am glad that we know, which possibilities we have. Probably we will be removed from extension managers and we will control all settings via email with our external partner - global admin.

I hope you will add this extended option in future. You have our vote for it

 

[JohnS_3CX]

I suggest to cast your vote here:

https://www.3cx.com/community/threads/3cx-management-console-more-granular-delegation-rights.52853/

 

[MatejB]

Thanks... so i am not alone

(i am not able add my vote there anymore, probably it is locked - error message: YOU HAVE INSUFFICIENT PRIVILEGES TO REPLY HERE)

 

[JohnS_3CX]

You cannot reply, but you should be able to vote by pressing the big green +1 button on the top

Did you try to click there?

 

[MatejB]

Sorry, i though it works as reply.

I upvoted with green button now.

Thank you for everything