Basically, there are three ways to grant the permission to users for changing the reachability settings on behalf of another user:

  • Users who are in the same Remeo AD-group(s)
  • Users who are in a SfB Delegation relationship
  • Users who are in the same SfB Team-call group

All permissions can be controlled using the following Active Directory group memberships:

  • RemeoADPermission (Option 1)
  • RemeoDelegatePermission (Option 2)
  • RemeoTeamPermission (Option 3)
  • RemeoADGlobalPermission (Option 4)

These Active Directory group names are static and cannot be changed without breaking the Remeo authorization features. All options can be used separately or in parallel, in order to do so, the administrator creates the corresponding groups according to the options which are supposed to be utilized.

Technically, these groups work as an indicator whose membership activates the Remeo permission check. The membership of these groups does not include the permissions for changing the reachability settings of other users belonging to the corresponding group. To grant permissions for changing reachability settings, a user must be a delegate / Team-call group member of the targeting user or both have to be a member of any other group containing Remeo in its name.


As the name indicates, the RemeoADGlobalPermission (Option 4) differs from this rule. While being a member of this group, the user (usually administrator and super-users) is able to change the reachability settings for all user in the organization.

Hints

  • Group nesting is supported for Option 1.
  • Please make sure in the AD the Primary group of all users is set to Domain users.

Examples

Option 1

A senior sales man (Senior A) wants to change the call forwarding on behalf of a user (Junior A) being in the junior sales group.

  1. Let's say Senior A already belongs to the AD group Sales-Senior and Junior A to Sales-Junior.
  2. Create the group RemeoADPermission in the AD.
  3. Now create a group e.g. Remeo_Sales-Junior. Important is, the string Remeo does exist somewhere (starts with, ends with or contains) in the group name.
  4. Assign the groups Sales-Senior and Sales-Junior to the group Remeo_Sales-Junior.
  5. Assign group Sales-Senior to RemeoADPermission.
  6. Now all users of Sales-Senior are allowed to change the settings of all users in Sales-Junior. If you only want certain users of Sales-Senior to be allowed, you wouldn't add the group Sales-Senior to RemeoADPermission but only those single users.

Option 2

An Assistant (delegate) wants to change the call forwarding settings on behalf of his manager (delegator).

  1. Make sure the Assistant has been configured as a delegate for this Manager, either using the SfB client or Remeo.
  2. If not exists create the group RemeoDelegatesPermission in the Active Directory.
  3. Add the Assistant to RemeoDelegatesPermission group which activates Remeo for checking the delegates membership settings.
  4. Now the Assistant can change the call forwarding settings of all of his Managers/Delegators.

Option 3

User A belongs to the same Team as User B and he wants to change his call forwarding settings.

  1. Make sure User A has been configured as a Team-call group member together with User B in SfB, either using the SfB client or Remeo.
  2. If not exists create the group RemeoTeamPermission in the Active Directory.
  3. Add User A to RemeoTeamPermission group, which activates Remeo for checking the team membership settings.
  4. Now User A can change the call forwarding settings of all of his Team members.

Option 4

Admin A is an Domain Administrator and he wants to change the reachability settings of all user within the organization.

  1. If not exists, create the group RemeoADGlobalPermission in the Active Directory.
  2. Add Admin A to RemeoADGlobalPermission group.
  3. Admin A is now able to change all reachability settings of all users within the organization.

Installation of Remeo

Now you can proceed with installing Remeo Client on the basis of this article.