Genesys CTI User Forum

Configuration Units are used to create complex configuration hierarchies for business, geographical or any other reasons. At Tenant/Environment level in 7.0+ framework you can create special "subfolder" called Configuration Unit. Inside CU you create folder tree analogical to that one on tenant/environment level so per example for Tenant create folders like Persons, Switches, Agent Groups, Campaigns etc. In that way inside single Configuration Unit you can create all relevant resources for Voice or Multimedia solutions in one place.

Look at framework 7.0+ documentations for specifics.

I suppose that usually you don't do 'right-click' on Tenant or Environment level so you didn't discover this functionality. Besides CU I've done 'right-click' only to re-configure GVP.

Since I (still) cannot attach graphics, here is a narrative;

[color=red][b]ALWAYS TRY OUT [u]EVERYTHING [/u] BEFORE YOU APPLY IT IN YOUR PRODUCTION SYSTEM! [/b][/color]

METHOD:

Add sub-folders under the following Resources and drag/drop the relevant sub-sub-Folders into each one, according to the Solution-type;

Agent Groups>Voice>(Agent Groups)
Agent Groups>Multimedia>(Agent Groups)
AND
DN Groups>Voice>(DN Groups)
DN Groups>Multimedia>(DN Groups)
AND
Persons>Voice>(Persons)
Persons>Multimedia>(Persons)
AND
Place Groups>Voice>(Place Groups)
Place Groups>Multimedia>(Place Groups)
AND
Places>Voice>(Places)
Places>Multimedia>(Places)
AND
Skills>Voice>(Skills)
Skills>Multimedia>(Skills)

Create a Username (Person) configured with access [b]removed [/b] for all of the Multimedia Folders (Called "[i]Voice Only[/i]").  Do this by navigating to all of the Resources>Multimedia Sub-Folders, right-click them and update the Security>Permissions options, adding the [i]Voice Only [/i] Username then select "No Access".

Create a Username (Person) configured with access [b]removed [/b] for all of the Voice Folders (Called "[i]Multimedia Only[/i]").  Do this by navigating to all of the Resources>Voice Sub-Folders, right-click them and update the Security>Permissions options, adding the [i]Multimedia Only [/i] Username then select "No Access".

Identify the Applications which are ONLY Voice (and do not need access to Multimedia Resources such as DN Groups, Agent Groups, Place Groups, etc.) - this may include identifying Config Proxies too - and restart them, using the "Log On As" Username [i]Voice Only[/i]. Do this by navigating to the Application(s) in the Environment Section and click on the Security Tab - then navigate to the "Log On As" section and updated the "SYSTEM Account" to "This Account" and select the Username [i]Voice Only[/i].

Identify the Applications which are ONLY Multimedia(and do not need access to Voice Resources such as DN Groups, Agent Groups, Place Groups, etc.) - this may include identifying Config Proxies too - and restart them, using the "Log On As" Username [i]Multimedia Only[/i]. Do this by navigating to the Application(s) in the Enviornment Section and click on the Security Tab - then navigate to the "Log On As" section and update the "SYSTEM Account" to "This Account" and select the Username [i]Multimedia Only[/i].

RESULTS EXPECTED:

The end effect is that the Applications for Voice should only be servicing Voice components and the data throughput is greatly reduced, since it is not "aware" of Multimedia components/objects - and vice versa for Multimedia Applications.

This, overall, shoud add a massive amount of stability to the overall Platform by ensuring the Framework and Solution Applications are constrained to their own Solution objects and statistics, etc. - and are not operating with a high volume of messaging for objects and statistics which it does not use.


- Let me know if this makes sense, anyone...? lol

TT

Tony

Configuration units are special folders created under Environment and Resources. These can then hold the same folders you would normally find under Environment or Resources. In a sense they start to create a multi tenant CME inside a single tenant one. Unlike multi tenant, were tenant A cannot see or use another tenant's objects, the restrictions are controlled only by permissions and can be less strict.

So in a single tenant CME for one customer (My Bank) you have a series of config units for each division (Loans, Mortgages, Savings). Within these config units you can add folders to hold whatever objects that division has, its own switch, t-server and persons for example. You can even have config units inside config units!

It is then very easy to grant permissions on the Loans config units to only the Loans access group (which lives inside the Loans CU).


Whilst writing this I found a new config option "Site" when I select new at the Environment and Resources level.
Sites can exist inside config units too. Something to play with in a model 

Some notes to go with this...

CSP's may have Clients which themselves have Clients which require Full Access to CME.  In my studies, I found that some Applications using a CSP threw up errors due to the fact that their own Cleints required updates for Objects which the CSP does not have acess to...

So - in my latest notes I am suggesting that individual Applications should be updated through Permissions - and my advice is to be very careful of the knock-on effect updating the Permissions a CSP might have...



TT

[quote author=borkokrz link=topic=5486.msg24081#msg24081 date=1272985850]
Everything looks good. Some notes:

1. If applications are "behind" CSProxy, you can set this specific account as "Log on as" only on CSProxy application. Less work, the same effect. All applications behind CSP will see only those objects, that this specific account will have access to.

2. Sometimes, even with complex configurations, it's better to play around with CU after all, than to do everything with subfolders. From day-to-day maintenance perspective, work done to configure CUs will prospect in the future with simpler management. For example if you'll need to change persmissions on all Voice objects, with subfolders you will have to do it in several places in CME (possibility of forgetting something). With CU this can be achieved simpler.

3. You are right on expected results. No matter which method do you use (Subfolders or CU) permissions allow to reduce data throughput and network traffic, improve stability and efficiency of Genesys applications. Of course this is very dependant on configuration.
[/quote]