Avaya

Modular Messaging Help

 Getting Started 
 Installation 
 Administration 
 Maintenance 
 Reference 
 
Home > Administration > Accessing the system > Accessing the MSS > Setting up administration accounts on the MSS

Setting up administration accounts on the MSS

Access to the Message Storage Server (MSS) is controlled by a set of local administration accounts that provide different access levels. The following administration accounts (also called logins) are available when the system is installed:

  • sa: The sa login provides access to most of the system's Web-based administration pages. The customer's system administrators can use the sa login either from a console or from another computer on the customer's LAN.
  • vm: The vm login provides access to a limited set of administration pages. The customer's voice messaging administrators can use the vm login either from a console or from another computer on the customer's LAN.
  • craft: The craft login is for use by the Avaya personnel performing system installation, administration, or maintenance on the customer site, either from the console or from another computer on the customer's LAN.
  • dadmin: The dadmin login is for use by Avaya Business Partners performing administration or maintenance on the customer site, either from the console or from another computer on the customer's LAN. The dadmin login has the same permissions as the craft login. Avaya personnel must use the craft login to activate the dadmin login and grant permission.
  • tscppp: The tscppp login is for use by the Avaya personnel performing system installation, administration, or maintenance from a remote location using a dial up connection. Avaya personnel must set up the tscppp password to allow remote dial in to the system.
  • sappp: The sappp login is for use by a customer's system administrator performing system administration and maintenance from a remote location using a dial up connection. The customer must set up the sappp password to allow the remote administrator to dial in to the system.
  • craftppp: The craftppp login is for use by the Avaya personnel performing system installation, administration, or maintenance from a remote location using a dial up connection. Avaya personnel must set up the craftppp password to allow remote dial in to the system.

When your MSS is installed, both the sa and vm logins come with default passwords. You should change these passwords immediately. For information about guidelines for passwords, see Password administration guidelines.

In addition to the administration accounts that are available after the MSS is installed, you can use the sa login to create new administration accounts. The administration accounts you create can have access privileges that are the same as the sa or vm account, or you can create administration accounts that have different access privileges. To create administration accounts that have access privileges that are different from the sa or vm accounts, you first have to set up one or more administrative roles.

When you set up an administrative role, you specify which web-administration pages the role can access and the access type. The access type can be read and write or read only. Roles assigned read and write access can view and modify settings for the web-administration pages that the role is allowed to access. Roles assigned read only access can view settings for the web administration pages that the role is allowed to access, but cannot modify settings. For more information about setting up administrative roles, see Role-Based Access Control and Managing administrative roles on the MSS.

When you create administration accounts, you can specify whether the account is authenticated locally when a user logs in to the MSS. Administration accounts can also be authenticated by an Authentication, Authorization, and Accounting (AAA) server, if one has been configured. For more information, see Configuring the MSS for login authentication by a AAA server. Parameters for password aging, which enhances the level of system security, can also be specified.

You can also administer subscriber default passwords and subscriber password aging. See Reassigning local subscriber default passwords for more information.

See the following topics for more information about administration accounts and passwords:

Top of page