Basically, there are three ways to grant the permission to users for changing the reachability settings on behalf of another user:

  • Users who are in the same Remeo AD-group(s)
  • Users who are in a SfB Delegation relationship
  • Users who are in the same SfB Team-call group

All permissions can be controlled using the following Active Directory group memberships:

  • RemeoADPermission (Option 1)
  • RemeoDelegatePermission (Option 2)
  • RemeoTeamPermission (Option 3)
  • RemeoADGlobalPermission (Option 4)

These Active Directory group names are static and cannot be changed without breaking the Remeo authorization features. All options can be used separately or in parallel, in order to do so, the administrator creates the corresponding groups according to the options which are supposed to be utilized.

Technically, these groups work as an indicator whose membership activates the Remeo permission check. The membership of these groups does not include the permissions for changing the reachability settings of other users belonging to the corresponding group. To grant permissions for changing reachability settings, a user must be a delegate / Team-call group member of the targeting user or both have to be a member of any other group containing Remeo in its name.


As the name indicates, the RemeoADGlobalPermission (Option 4) differs from this rule. While being a member of this group, the user (usually administrator and super-users) is able to change the reachability settings for all user in the organization.

Hints

  • Group nesting is supported for Option 1.
  • Please make sure in the AD the Primary group of all users is set to Domain users.

Examples

Option 1

User A is an IT Admin and wants to change the call forwarding on behalf of User B, which is in the sales department.

  1. Let's say user A already belongs to the AD group IT-Department and user B in Sales-Department.
  2. Create the group RemeoADPermission in the AD.
  3. Now create a group e.g. Remeo_Sales. Important is, the string Remeo does exist somewhere (starts with, ends with or contains) in the group name.
  4. Assign the groups IT-Department and Sales-Department to the group Remeo_Sales.
  5. Assign group IT-Department to RemeoADPermission.
  6. Now all users of IT-Department are allowed to change the settings of all users in Sales-Department. If you only want certain users of IT-Department to be allowed, you wouldn't add the group IT-Department to RemeoADPermission but only those single users.

Option 2

User B is a delegate of User A and he wants to change his call forwarding settings.

  1. Make sure User B has been configured as a delegate for User A, either using the SfB client or Remeo.
  2. If not exists create the group RemeoDelegatesPermission in the Active Directory.
  3. Add User B to RemeoDelegatesPermission group which activates Remeo for checking the delegates membership settings.
  4. Now User B can change the call forwarding settings of User A.

Option 3

User B belongs to the same Team as User A and he wants to change his call forwarding settings.

  1. Make sure User B has been configured as a Team member together with User A, either using the SfB client or Remeo.
  2. If not exists create the group RemeoTeamPermission in the Active Directory.
  3. Add User B to RemeoTeamPermission group, which activates Remeo for checking the team membership settings.
  4. Now User B can change the call forwarding settings of User A.

Option 4

User B is an Domain Administrator and he wants to change the reachability settings of all user within the organization.

  1. If not exists, create the group RemeoADGlobalPermission in the Active Directory.
  2. Add User B to RemeoADGlobalPermission group.
  3. User B is now able to change all reachability settings of all users within the organization.

Installation of Remeo

Now you can proceed with installing Remeo Client on the basis of this article.