Basically, there are three ways to grant the permission to users for changing the reachability settings on behalf of another user:
- Users who are in the same Remeo AD-group(s)
- Users who are in a SfB Delegation relationship
- Users who are in the same SfB Team-call group
All permissions can be controlled using the following Active Directory group memberships:
These Active Directory group names are static and cannot be changed without breaking the Remeo authorization features. All options can be used separately or in parallel, in order to do so, the administrator creates the corresponding groups according to the options which are supposed to be utilized.
Technically, these groups work as an indicator whose membership activates the Remeo permission check. The membership of these groups does not include the permissions for changing the reachability settings of other users belonging to the corresponding group. To grant permissions for changing reachability settings, a user must be a delegate / Team-call group member of the targeting user or both have to be a member of any other group containing Remeo in its name.
As the name indicates, the
RemeoADGlobalPermission (Option 4) differs from this rule. While being a member of this group, the user (usually administrator and super-users) is able to change the reachability settings for all user in the organization.
- Group nesting is supported for Option 1.
- Please make sure in the AD the
Primary groupof all users is set to
A senior sales man (Senior A) wants to change the call forwarding on behalf of a user (Junior A) being in the junior sales group.
- Let's say Senior A already belongs to the AD group
Sales-Seniorand Junior A to
- Create the group
RemeoADPermissionin the AD.
- Now create a group e.g.
Remeo_Sales-Junior. Important is, the string
Remeodoes exist somewhere (starts with, ends with or contains) in the group name.
- Assign the groups
Sales-Juniorto the group
- Assign group
- Now all users of
Sales-Seniorare allowed to change the settings of all users in
Sales-Junior. If you only want certain users of
Sales-Seniorto be allowed, you wouldn't add the group
RemeoADPermissionbut only those single users.
An Assistant (delegate) wants to change the call forwarding settings on behalf of his manager (delegator).
- Make sure the Assistant has been configured as a delegate for this Manager, either using the SfB client or Remeo.
- If not exists create the group
RemeoDelegatesPermissionin the Active Directory.
- Add the Assistant to
RemeoDelegatesPermissiongroup which activates Remeo for checking the delegates membership settings.
- Now the Assistant can change the call forwarding settings of all of his Managers/Delegators.
User A belongs to the same Team as User B and he wants to change his call forwarding settings.
- Make sure User A has been configured as a Team-call group member together with User B in SfB, either using the SfB client or Remeo.
- If not exists create the group
RemeoTeamPermissionin the Active Directory.
- Add User A to
RemeoTeamPermissiongroup, which activates Remeo for checking the team membership settings.
- Now User A can change the call forwarding settings of all of his Team members.
Admin A is an Domain Administrator and he wants to change the reachability settings of all user within the organization.
- If not exists, create the group
RemeoADGlobalPermissionin the Active Directory.
- Add Admin A to
- Admin A is now able to change all reachability settings of all users within the organization.
Installation of Remeo
Now you can proceed with installing Remeo Client on the basis of this article.