Access to the Message Storage Server
(MSS) is controlled by a set of local administration accounts that provide different access
levels. The following administration accounts (also called logins) are available when the system is installed:
- sa: The sa login provides access to most of the system's Web-based administration pages. The customer's system administrators can use
the sa login either from a console or from another computer on
the customer's LAN.
- vm: The vm login provides access to a
limited set of administration
pages. The customer's voice messaging administrators can use the
vm login either from a console or from another computer on the
customer's LAN.
- craft: The craft login is for use by the Avaya
personnel performing system installation, administration, or maintenance
on the customer site, either from the console or from another
computer on the customer's LAN.
- dadmin: The dadmin login is for use by Avaya
Business Partners performing administration or maintenance on
the customer site, either from the console or from another computer
on the customer's LAN. The dadmin login has the same permissions
as the craft login. Avaya personnel must use the craft login to activate
the dadmin login and grant permission.
- tscppp: The tscppp login is for use by the
Avaya personnel performing system installation, administration,
or maintenance from a remote location using a dial up connection. Avaya personnel must set up the tscppp password
to allow remote dial in to the system.
- sappp: The sappp login is for use by a customer's system
administrator performing system administration and maintenance
from a remote location using a dial up connection. The customer must set up the sappp password to allow
the remote administrator to dial in to the system.
- craftppp: The craftppp login is for use by
the Avaya personnel performing system installation, administration,
or maintenance from a remote location using a dial up connection. Avaya personnel must set up the craftppp password
to allow remote dial in to the system.
When your MSS is installed, both the sa
and vm logins come with default passwords. You should change
these passwords immediately. For information about guidelines for
passwords, see Password administration guidelines.
In addition to the administration accounts that are available after the MSS is installed, you can use the sa login to create new administration accounts. The administration accounts you create can have access privileges that are the same as the sa or vm account, or you can create administration accounts that have different access privileges. To create administration accounts that have access privileges that are different from the sa or vm accounts, you first have to set up one or more administrative roles.
When you set up an administrative role, you specify which web-administration pages the role can access and the access type. The access type can be read and write or read only. Roles assigned read and write access can view and modify settings for the web-administration pages that the role is allowed to access. Roles assigned read only access can view settings for the web administration pages that the role is allowed to access, but cannot modify settings. For more information about setting up administrative roles, see Role-Based Access Control and Managing administrative roles on the MSS.
When you create administration accounts, you can specify whether the account is authenticated locally when a user logs in to the MSS. Administration accounts can also be authenticated by an Authentication, Authorization, and Accounting (AAA) server, if one has been configured. For more information, see Configuring the MSS for login authentication by a AAA server. Parameters for password aging, which enhances the level
of system security, can also be specified.
You can also administer subscriber default passwords
and subscriber password aging. See Reassigning
local subscriber default passwords for more information.
See the following topics for more information about administration accounts and passwords:
Top of page
|