Understanding SIP devices provisioning permissions

Whether you're the owner of a Service Provider, Organization or User account, VoipNow lets you add and manage SIP devices with specific liberties and limitations. This article explains provisioning rights for each type of account. 

Overview

Three levels of provisioning permissions are available in VoipNow: Modify, View or None. 

VoipNow admins have the freedom to add, edit, view and remove SIP devices in any context, regardless of provisioning permissions set on account levels. They can access the SIP devices area from Unified Communications → Telephony Provisioning → SIP Devices.   

Owners of Service Provider and Organization accounts may add and manage SIP devices in their own context and/or in the context of their children accounts. For example, if you're the owner of an Organization account, you can add devices for your own Organization (i.e. in your own context, in your SIP Devices page), but also for the Users in your Organization (i.e. in the User's context, in his SIP Devices page).

Generally, your provisioning capabilities depend on two factors:

1. The level of the Allow to provision devices option on your account. 
2. The level of the Allow to provision devices option on your children accounts. 

Read below to find out how these permissions set at the level of your account and that of your children accounts limit or expand your provisioning capabilities. 

For Service Providers

Adding SIP devices

If you're the owner of a Service Provider account, here are your provisioning capabilities:

1. If your Allow to provision devices permission is Modify, you can add SIP devices in you context as well as in the context of your Organizations and Users. It doesn't matter what provisioning permissions they have in place. 
2. If your Allow to provision devices permission is View, you can:
   
   • add SIP devices in your context, but you can only assign them to Organizations and Users with Modify permissions.
   • add SIP devices in an Organization context as long as that Organization has Modify permission.
   • add SIP devices in a User context as long as that User has Modify permission. Otherwise, you can't.
3. If your Allow to provision devices permission is set to None, you cannot access the SIP Devices area as it's no longer displayed in the interface. 

Editing and removing SIP devices

While you're in the SIP Devices page, you can read-only, edit and/or remove SIP devices. You cannot edit or remove devices that are read-only.

The devices listed in the SIP Devices Inventory fall into several categories:

• devices owned by you or the admin
• devices owned by or assigned to your Organizations
• devices owned by or assigned to the Users in your Organizations 
  

Your right to edit and remove devices depends on what provisioning level you, your Organizations and Users have (i.e. how the Allow to provision devices option is set) as well as on the ownership of the device. Read below for clarification. 

1. If your Allow to provision devices permission is Modify, you can edit and remove all listed devices. There are no restrictions.

2. If your Allow to provision devices permission is View, you can only edit devices under the following conditions:

   • You or the admin owns the device; the device is not assigned to any Organization; you own at least one Organization with Modify permission (and at least one of its Users has Modify permission). Please note that, although you can edit this device, you cannot remove it.
   • You, the admin or one of your Organizations owns the device; the device is assigned to an Organization with Modify permission; at least one extension the device is assigned to belongs to a User with Modify permission. Please note that while you can edit the device, you cannot remove it. If the device is assigned to the extension of a User with Modify permission, you can also edit the Assigned Organization.
   • A User with Modify permission owns the device and you own the Organization to which the device is assigned. Please note that, although you can edit such devices, you cannot remove them.

3. If your Allow to provision devices permission is set to None, you cannot access the SIP Devices area as it's no longer displayed in the interface. 

Clearing assignments and regenerating provisioning files

You can only Clear Assignments and Regenerate Files for editable devices! You cannot perform these operations on devices for which you have "read-only" permissions.

Assigning provisioning permissions on children accounts

Your liberty to assign provisioning permissions to your children accounts depends on how the Allow to provision devices option is set on your account: 

1. If your Allow to provision devices permission is set to Modify, you can assign up to Modify permissions to your Organization and User accounts.
2. If your Allow to provision devices permission is set to View, you can assign up to View permissions to your Organization and User accounts.
3. If your Allow to provision devices permission is set to None, you cannot assign any provisioning permissions to your Organization and User accounts. In this case, the SIP Devices area will not even show in your interface.

For Organizations

Adding SIP devices

If you're the owner of an Organization account, here are your provisioning capabilities:

1. If your Allow to provision devices permission is Modify, you can add SIP devices in your context, but also in the context of your Users. It doesn't matter what provisioning permissions they have in place. 
2. If your Allow to provision devices permission is View, you can:
   
   • add SIP devices in your context, but you can only assign them to Users with Modify permissions.
   • add SIP devices in a User context as long as that User has Modify permission. Otherwise, you can't.
3. If your Allow to provision devices permission is set to None, you cannot access the SIP Devices area, as it's no longer displayed in the interface. 

Editing and removing SIP devices