RBAC

Role based access control (RBAC) allows businesses to assign server, gateway, and application access permissions based on a user’s job function, or role. Avaya implements RBAC to the Messaging Server through the use of profiles for the Server web page.

Avaya customers can create and modify profiles to allow access to Avaya server and gateway information according to job functions and business needs. The following table lists the examples:

Table 1. RBAC profile examples
Profile name	Job function and access permissions
Privileged Administrator	The privileged administrator account has the following permissions to access the system: Read or write access to system parameters, such as IP addresses and software upgrades. Read or write access to create and modify logins. Modify, assign, and define user roles.
Backup Administrator	Ability to perform only backups and restores.
Security Administrator	Read-write access to create other logins Create, modify or assign roles and profiles Install ASG keys Install licenses Install PKI certificates and keys
Avaya Maintenance and Support	Access to maintenance logs, run diagnostics.
Auditor	Read-only access to logs and audit files. Read-only permissions prevents unauthorized modification of log files.
Telephony Application Administrator	Read-write access to application configuration, such as trunks
Telephone Provisioning	Ability to add, change, and delete a certain range of telephone extensions
ACD Administrator	Ability to modify call center vectors
Checker	Read-only access, able to only view certain changes