Genesys CTI User Forum
Genesys CTI User Forum => Genesys CTI Technical Discussion => Topic started by: phil on May 18, 2010, 12:33:36 PM
-
Hi there,
by default there are 6 Access Groups provided out-of-the-box with Genesys Framework. SYSTEM and default are clear, i think.
But what for is the group EVERYONE designed for. Neither in lab environment nor in production environment this Group is used by any user.
Why are there Admins and Superadmin. Is there a recommendation to use these Groups?
Cheers
Phil
-
"Administrators" are all users (persons) configured in CME who are not agents, by default this group gets full access to everything.
"Super Administrators", initially contains only the default user and again this group gets full access to everything.
There is also "Users", everyone who is configured in CME as an agent, will be automatically added to this group. This gives them Read and Execute on the Resources section.
"EVERYONE" as its name suggests is everyone configured in CME, and gives them, Read and Execute on the Environment section and all that it contains.
My recomendation is to remove all these groups (except "Super Admin") from the security tabs of both Environment and Resources, with propagate set, before you start to build CME. You can then create access groups that meet your needs and which are controlled rather than relying on these default ones.
If you are using version 7.6 of Configuration Server, there is an option, "no-default-access", to stop users being added to these groups. In my view this should be used as well as removing the security permissions for the groups.
-
Thanks for that.
The EVERYONE- Access Group is empty in the lab environment. Does this mean members are just invisible, taking it, that agents are added automatically, or is this just not used then?
There is an Access Group "default" available in Object permissions, tho its not in Access Group folder itself. So, why keeping Super Administrators if just default is in? Why having a special Group for default, as it has FullControl permissions anyway and never can be deleted?
-
I think that EVERYONE is a throw back to earlier versions of Genesys, I've not seen it in recent versions.
You should create a new super admin as one of the first steps of setting up CME, you should then use this account rather than default. We run Genesys as a managed service so our users are super admins and the customers get allocated to different access groups depending on their roles.
Is it an access group default, or just the default user? You can allocate permissions to either groups or individuals.
-
It is not listed in the Access Groups, just in the Permissions of object you can chose it. so it seems to be just the default user displayed with a "!" sign in there.
Cheers!
-
How to get access on Super admin folder for normal user created