.. rst-class:: chapter-with-expand Role Mapping for Prime Collaboration Assurance ---------------------------------------------- Service providers deploying VOSS-4-UC use role-based access control (RBAC) to restrict certain management actions to a specific set of users. Administrators at each level have access to the information in all hierarchy levels below them. Prime Collaboration Assurance roles are hierarchical in the following order: 1. Super Administrator - Includes all privileges of System Administrator, Network Administrator, Operator, and Help Desk, along with the Super Administrator permissions. 2. System Administrator. 3. Network Administrator - Includes all privileges of Operator and Help Desk, along with the Network Administrator permissions. 4. Operator - Read-only administrative access. 5. Help Desk. VOSS-4-UC roles map to the Prime Collaboration Assurance roles shown in the following table. You can find Roles in VOSS-4-UC under **Role Management > Roles**. The three drop-down lists that are important in VOSS-4-UC are **Hierarchy Type**, **Service Assurance Role Type**, and **HCS Component Access**. Prime Collaboration Assurance roles are shown in the following table in hierarchical order from top to bottom. The role shown in BOLD represents the highest role available. Role Mapping Between VOSS-4-UC and Prime Collaboration Assurance ................................................................ +-----------+----------------+----------------------+--------------------------+-------------------------+ | Hierarchy | Service | | Prime Collaboration | | | Type in | Assurance Role | HCS Component Access | Assurance Role | Notes | | VOSS-4-UC | Type | | | | +===========+================+======================+==========================+=========================+ | | | | | Provider roles are | | | | | | always the top | | | | | | organization unit in | | | | | | the VOSS-4-UC | | | | | | navigation tree. | | | | | | | | | | | | The Provider roles can | | | | | | see all devices, | | | | | | including shared | | | | | **Super Administrator**, | devices such as Cisco | | Provider | Administrator | Fulfillment and | System Administrator, | Unified Border Element | | | | Service Assurance | Network Administrator | (SP Edition). | | | | | | | | | | | | A Provider with this | | | | | | role has | | | | | | Administrative level | | | | | | access to VOSS-4-UC | | | | | | and Prime Collaboration | | | | | | Assurance. | +-----------+----------------+----------------------+--------------------------+-------------------------+ | | | | | A Provider with this | | | | | | role has Administrative | | | | Service | | level access to | | | | Assurance | | VOSS-4-UC and Prime | | | | Only | | Collaboration | | | | | | Assurance. | +-----------+----------------+----------------------+--------------------------+-------------------------+ | | | Fulfillment | Not Applicable | A Provider with this | | | | Only | | role has | | | | | | Administrative level | | | | | | access to VOSS-4-UC | +-----------+----------------+----------------------+--------------------------+-------------------------+ | | | | | A Provider with this | | | | | | role has | | | | | | Administrative level | | | | Fulfillment | | read-only access to | | | Operator | and Service | **Operator**, Help Desk | VOSS-4-UC | | | | | | and Prime | | | | | | Collaboration | | | | | | Assurance. | +-----------+----------------+----------------------+--------------------------+-------------------------+ +-----------+----------------+----------------------+---------------------------+------------------------+ | Hierarchy | Service | | Prime Collaboration | | | Type in | Assurance Role | HCS Component Access | Assurance Role | Notes | | VOSS-4-UC | Type | | | | +===========+================+======================+===========================+========================+ | | | Service | | A Provider with this | | | | Assurance | | role has | | | | Only | | Administrative level | | | | | | read-only access to | | | | | | VOSS-4-UC and Prime | | | | | | Collaboration | | | | | | Assurance. | +-----------+----------------+----------------------+---------------------------+------------------------+ | | | | | A Provider with this | | | | | | role has | | | | Fulfillment | | Administrative level | | | | Only | Not Applicable | read-only access to | | | | | | VOSS-4-UC and Hosted | | | | | | Collaboration | | | | | | Mediation-Fulfillment. | +-----------+----------------+----------------------+---------------------------+------------------------+ | | | | | These roles can only | | | | | | see the customer | | | | | | information that | | | | | | belongs to your | | | | | | Reseller organization. | | | | | | | | | | Fulfillment and | | A Reseller with this | | Reseller | Administrator | Service Assurance | **Network Administrator** | role has | | | | | | Administrative level | | | | | | access to VOSS-4-UC, | | | | | | Hosted Collaboration | | | | | | Mediation-Fulfillment, | | | | | | and Prime | | | | | | Collaboration | | | | | | Assurance. | +-----------+----------------+----------------------+---------------------------+------------------------+ | | | | | A Reseller | | | | | | with this role | | | | | | has Administrative | | | | Service | **Network Administrator** | level access to | | | | Assurance | | VOSS-4-UC and Prime | | | | Only | | Collaboration | | | | | | Assurance. | +-----------+----------------+----------------------+---------------------------+------------------------+ +-----------+----------------+----------------------+----------------------------+-------------------------+ | Hierarchy | Service | | Prime Collaboration | | | Type in | Assurance Role | HCS Component Access | Assurance Role | Notes | | VOSS-4-UC | Type | | | | +===========+================+======================+============================+=========================+ | | | | | A Reseller | | | | | | with this role | | | | | | role has | | | | Fulfillment | | Administrative level | | | | Only | Not Applicable | access to VOSS-4-UC | | | | | | and Hosted | | | | | | Collaboration | | | | | | Mediation-Fulfillment. | +-----------+----------------+----------------------+----------------------------+-------------------------+ | | | | | A Reseller with this | | | | | | role has | | | | | | Administrative level | | | | Fulfillment | | read-only access to | | | Operator | and Service | **Operator**, Help Desk | VOSS-4-UC | | | | | | and Prime | | | | | | Collaboration | | | | | | Assurance. | +-----------+----------------+----------------------+----------------------------+-------------------------+ | | | | | A Reseller with this | | | | | | role has | | | | | | Administrative level | | | | Service | **Operator**, Help Desk | read-only access to | | | | Assurance | | VOSS-4-UC and Prime | | | | Only | | Collaboration | | | | | | Assurance. | +-----------+----------------+----------------------+----------------------------+-------------------------+ | | | | | A Reseller with this | | | | | | role has | | | | Fulfillment | | Administrative level | | | | Only | Not Applicable | read-only access to | | | | | | VOSS-4-UC. | +-----------+----------------+----------------------+----------------------------+-------------------------+ | | | | | With this role you can | | | | | | only see your own | | | | | | customer information. | | | | | | | | | | | | A Customer with this | | | | Fulfillment and | | role has | | Customer | Administrator | Service Assurance | **Network Administrator**, | Administrative level | | | | | | access to VOSS-4-UC | | | | | | and Prime | | | | | | Collaboration | | | | | | Assurance. | +-----------+----------------+----------------------+----------------------------+-------------------------+ | | | | | A Customer with this | | | | | | role has Administrative | | | | Service | **Network Administrator**, | level access to | | | | Assurance | | to VOSS-4-UC and | | | | Only | | Prime Collaboration | | | | | | Assurance. | +-----------+----------------+----------------------+----------------------------+-------------------------+ +-----------+----------------+----------------------+----------------------------+-------------------------+ | Hierarchy | Service | | Prime Collaboration | | | Type in | Assurance Role | HCS Component Access | Assurance Role | Notes | | VOSS-4-UC | Type | | | | +===========+================+======================+============================+=========================+ | | | | | A Customer with this | | | | | | role has | | | | Fulfillment | | Administrative level | | | | Only | Not Applicable | access to VOSS-4-UC. | +-----------+----------------+----------------------+----------------------------+-------------------------+ | | | | | A Customer with this | | | | | | role has | | | | | | Administrative level | | | | Fulfillment | | read-only access to | | | Operator | and Service | Operator, Help Desk | VOSS-4-UC, Hosted | | | | Assurance | | Collaboration | | | | | | Mediation-Fulfillment, | | | | | | and Prime | | | | | | Collaboration | | | | | | Assurance. | +-----------+----------------+----------------------+----------------------------+-------------------------+ | | | | | A Customer with this | | | | | | role has | | | | | | Administrative level | | | | Service | Operator, Help Desk | read-only access to | | | | Assurance | | VOSS-4-UC and Prime | | | | Only | | Collaboration | | | | | | Assurance. | +-----------+----------------+----------------------+----------------------------+-------------------------+ | | | | | A Customer with this | | | | | | role has | | | | Fulfillment | | Administrative level | | | | Only | Not Applicable | read-only access to | | | | | | VOSS-4-UC and Hosted | | | | | | Collaboration | | | | | | Mediation-Fulfillment. | +-----------+----------------+----------------------+----------------------------+-------------------------+ Rules for Creating Domain Manager Adapter and Shared Data Repository Users .......................................................................... 1. Synchronize a DMA or SDR user into VOSS-4-UC using LDAP at the Provider hierarchy level. If you add the user manually in VOSS-4-UC, the user is not pushed to Prime Collaboration Assurance. 2. Assign each DMA user a Domain Manager Adapter (DMA) role. Check the role of the user in VOSS-4-UC (**User Management > Users** - **Base** tab), then check the HCS Component Access field (in **Role Management > Roles**) to see if the user has an Assurance role. If the user is assigned a Fulfillment role only, then the user is not pushed to Prime Collaboration Assurance. Changes to User Roles After an LDAP Sync ........................................ If you make role changes to the user after the user is synched into VOSS-4-UC using LDAP, the changes affect the DMA SDR as follows: * If the role change is from a DMA role to another DMA role, the SDR is updated with the new role name. * If the role change is from a DMA role to a non-DMA role, the SDR user is deleted. * If the SDR user is deleted, and the user is modified so that the user's role is changed to a DMA role again, the DMA SDR User is recreated with the DMA role. * If the user is moved to a different hierarchy level, rules are applied based on the role that the user is moving to. * If a site does not have any DMA roles, then the SDR user is deleted for any user that is moved to the Site hierarchy level. * For DMA roles, the user must be a Provider Administrator, Reseller Administrator, Customer Administrator, or Operator on VOSS-4-UC. Site Operators are not pushed to DMA.