Permissions Set By the Cisco Unity Permissions Wizard

Contents

Permissions Set By the Cisco Unity Permissions Wizard When Subscribers Are Homed in Domino. 2

Permissions Set for the Installation Account 2

User Rights. 2

Group Membership. 2

Permissions Set for the Directory and Message Store Services Account 2

User Rights. 2

Group Membership. 2

Permissions Set By the Cisco Unity Permissions Wizard When Subscribers Are Homed in Exchange 2003 or Exchange 2000 (With or Without Exchange 5.5)  2

Permissions Set for the Installation Account 2

User Rights. 2

Group Membership. 3

Active Directory Permissions. 3

Permissions Set for the Directory Services Account 3

User Rights. 3

Group Membership. 4

Active Directory Permissions. 4

Permissions Set for the Message Store Services Account 5

User Rights. 5

Group Membership. 5

Exchange Permissions. 6

Permissions Set By the Cisco Unity Permissions Wizard When Subscribers Are Homed Only in Exchange 5.5. 6

Permissions Set for the Installation Account 6

User Rights. 6

Group Membership. 6

Permissions Set for the Directory and Message Store Services Account 7

User Rights. 7

Group Membership. 7

Revision History. 7

 

Permissions Set By the Cisco Unity Permissions Wizard When Subscribers Are Homed in Domino

Permissions Set for the Installation Account

User Rights

The installation account is granted the following user rights:

*          Log on as a service

*          Act as part of the operating system

*          Log on as a batch job

Group Membership

The installation account is added to one of the following groups:

*          The Administrators group, when the Cisco Unity server is a domain controller

*          The Local Administrators group, when the Cisco Unity server is not a domain controller

Permissions Set for the Directory and Message Store Services Account

User Rights

The directory and message store services account is granted the following user rights:

*          Log on as a service

*          Act as part of the operating system

*          Log on as a batch job

Group Membership

The directory and message store services account is added to one of the following groups:

*          The Administrators group, when the Cisco Unity server is a domain controller

*          The Local Administrators group, when the Cisco Unity server is not a domain controller

Permissions Set By the Cisco Unity Permissions Wizard When Subscribers Are Homed in Exchange 2003 and/or Exchange 2000 (With or Without Exchange 5.5)

Permissions Set for the Installation Account

User Rights

The installation account is granted the following user rights:

*          Log on as a service

*          Act as part of the operating system

*          Log on as a batch job

Group Membership

The installation account is added to one of the following groups:

*          The Administrators group, when the Cisco Unity server is a domain controller

*          The Local Administrators group, when the Cisco Unity server is not a domain controller

Active Directory Permissions

If any Exchange 2000 users will be Cisco Unity subscribers (regardless of whether any Exchange 5.5 users will also be Cisco Unity subscribers), Cisco Unity Permissions Wizard sets the following permissions for the installation account.

Container
 

Where new users are created

Applied onto this object only

*          Create User objects

Applied onto User objects

*          Read properties

*          Write properties

*          List contents

*          Change password

*          Reset password

Where new groups are created

Applied onto this object only

*          Create Group objects

Applied onto Group objects

*          Read properties

*          Write properties

*          List contents

Where Cisco Unity location objects are created

Applied onto this object and all child objects

*          Create CiscoEcsbuUMLocation objects

Applied onto CiscoEcsbuUMLocation objects

*          Full control

Permissions Set for the Directory Services Account

User Rights

The directory services account is granted the following user rights:

*          Log on as a service

*          Act as part of the operating system

*          Log on as a batch job

Group Membership

The directory services account is added to one of the following groups:

*          The Administrators group, when the Cisco Unity server is a domain controller

*          The Local Administrators group, when the Cisco Unity server is not a domain controller

Active Directory Permissions

If any Exchange 2003 and/or 2000 users will be Cisco Unity subscribers (regardless of whether any Exchange 5.5 users will also be Cisco Unity subscribers), Cisco Unity Permissions Wizard sets the following permissions for the service account.

Container

Permissions

Where new users are created

Applied onto this object only. Set only if creating users via Cisco Unity Administrator is allowed.

*          Create User objects

*          Delete User objects

Applied onto this object only. Set only if creating contacts via Cisco Unity Administrator is allowed.

*          Create Contact objects

*          Delete Contact objects

Applied onto User objects

*          Read properties

*          Write properties

*          List contents

*          Change Password. Set only if creating users via Cisco Unity Administrator is allowed.

*          Reset Password. Set only if creating users via Cisco Unity Administrator is allowed.

Applied onto Contact objects

*          Read properties

*          Write properties

*          List contents

Where new groups are created

Applied onto this object only. Set only if creating groups via Cisco Unity Administrator is allowed.

*          Create Group objects

*          Delete Group onjects

Applied onto Group objects

*          Read properties

*          Write properties

*          List contents