Managing access to call detail records

Your company has multiple departments but you want to allow department administrators or managers to access CDRs associated with their department only.

This recipe includes the following tasks:

1. Creating a department
2. Assigning extensions to a department
3. Configuring a department administrator profile
4. Configuring a department administrator account
5. Verifying call detail records for the department administrator account

Before you begin

In this recipe, you edit an existing extension. For more information about creating an IP extension, see Configuring extension settings.

Creating a department

Create a department that you want an administrator to manage. You will assign extensions to this department in the next task.

1. Go to Extension > Group > Department.
2. Click New.
3. Enter a Name for this department. The name can contain numbers (0-9), uppercase and lowercase letters (A-Z, a-z),and underscores ( _ ). Other special characters and spaces are not allowed. For example, SalesOttawa.
4. Optionally, enter any notes in Comment.
5. Click Create.

Assigning extensions to a department

Access extensions to assign them to a department. You can assign extensions individually or in a batch.

To assign a single extension

1. Go to Extension > Extension > IP Extension.
2. Double-click the extension that you want to assign.
3. Under User Setting, select the Department. For example, SalesOttawa.

   

4. Click OK.

To assign multiple extensions

1. Go to Extension > Extension > IP Extension
2. Select Actions > Batch Edit.
3. You can search and filter extensions. Select the extensions.
4. Click Next.
5. In Management, enable Department, and select a department.

   

6. Click Next.
7. Review the details.
8. To confirm the changes, click Apply.
9. Click Close.

Configuring a department administrator profile

Create an administrator profile and select which call history privileges you want to give to a department administrator. In the next task, you will create an administrator account to which you will assign this profile.

1. Go to System > Administrator > Admin Profile.

2. Click New.
   

3. Enter a descriptive Profile name. For example, CDR.

4. In the Access Control list, go to Call History.

   

5. Decide on the access that you want to give to the administrator (Read Only or Read-Write).
6. Click Create.

Configuring a department administrator account

Configure an administrator account and decide which departments you want this administrator to manage.

To create a department FortiVoice administrator account

1. Go to System > Administrator > Administrator.
2. Click New.
   
3. Fill in the following mandatory fields:
   1. Enter a descriptive Administrator name for this account. The name can contain numbers (0-9), uppercase and lowercase letters (A-Z, a-z), hyphens (-), and underscores ( _ ). Other special characters and spaces are not allowed. For example, SalesAdminOttawa.
   2. Enter the administrator's Email address.
   3. Select the Admin profile.

      Enter a FortiVoice administrator password that is at least six characters in length. For better security, enter a longer password with a complex combination of characters and numbers, and change the password regularly. Failure to provide a strong password could compromise the security of your FortiVoice system.

   4. Add a New password and Confirm password. The password can contain any character except spaces. This field is available when the Authentication type is Local.
   5. Enable Department only.
   6. Expand the Departments section.
   7. Click + and then select one or more departments for the administrator to manage.

      

   8. Click Close.
4. Click Create.

Verifying call detail records for the department administrator account

Verify that the department administrator account can access the CDRs for its department only.

1. Log in to the FortiVoice GUI using the credentials of the department administrator account.
2. Go to Monitor > Call History.
3. Make sure that the GUI shows the Call Detail Record (CDR) tab and that you can double-click an entry to see more information.