17 Roles and Permissions
Roles and Permissions Overview
PortSIP Roles and Permissions provide role-based control over the features and functions that users can access in the PortSIP PBX.
Each role includes a predefined set of permissions that determines the scope of access available to a user. By assigning roles, administrators can efficiently control who can view, configure, and manage different parts of the system.
PortSIP PBX includes ready-to-use standard roles for common positions, such as administrators and end users, with appropriate permissions already configured. For more specialized requirements, you can also create custom roles and define exactly which permissions they include. Both standard and custom roles can be assigned to users.
Benefits of Roles and Permissions
Faster, Error-Free User Onboarding
Roles simplify user onboarding by allowing administrators to assign a predefined permission set when creating users.
Instead of configuring permissions individually for each new user, you can assign a role that already includes the required access. This approach reduces manual effort and minimizes configuration errors.
Standard roles make it easy to grant the correct level of system access to multiple users at once, significantly reducing the risk of inconsistent or incorrect permissions.
You can also use bulk upload options and templates to efficiently assign roles to users across the organization.
Stronger Security and Access Control
Role-based access control (RBAC) adds an extra layer of security by ensuring users only have access to the features required for their responsibilities.
All users assigned to the same role receive an identical permission set, reducing the risk of unauthorized or inconsistent access.
Custom roles allow granular control over system access. You can define precise permission combinations and update them at any time to match evolving security or operational requirements.
Roles also make it easier to adapt to organizational changes by allowing you to add, remove, or modify roles as business needs change.
Delegated Administration with Admin Roles
Admin roles allow you to distribute administrative responsibilities across your organization without granting full system access.
You can assign admin roles for specific functions, such as billing or tenant management, while restricting access to other administrative areas.
Custom admin roles provide fine-grained control, enabling you to delegate specialized administrative authority while maintaining overall system security.
Standard Roles in PortSIP PBX
PortSIP PBX includes a set of standard roles, consisting of three system administrator roles and three tenant user roles. Each role includes a predefined set of permissions.
System Administrators
System Administrator roles provide access to system-level configuration and management.
For details about System Administrator roles and permissions, see Administrator Management.
Tenant User Roles
Tenant user roles control access within a specific tenant. Permissions are limited to tenant-level settings and assigned user functions.
Admin
Full administrative access within the tenant. This role allows the user to manage tenant settings, users, and features.
Queue Supervisor (Queue Manager)
Access limited to queue management. This role is intended for users responsible for monitoring and managing call queues.
Standard (International)
Access to personal user settings and international calling.
Standard
Access to personal user settings and domestic calling.
Custom Roles
Custom roles allow you to define permission sets for specific business functions, departments, or jurisdictions.
When creating a custom role, select the exact permissions you want to grant, such as access to phone settings while restricting access to administrative features. You can continue adding permissions until the role includes only the intended scope of access.
Once created, the role can be assigned to any user who requires the same permissions, eliminating the need to repeatedly configure permissions for individual users.
Predefined Roles and Permissions
PortSIP PBX also includes predefined roles with built-in permission sets that can be assigned by administrators.
Permissions for predefined roles cannot be modified.
View Predefined Roles
Sign in to the PBX Web Portal.
Go to Advanced > Roles.
Permissions Overview
Permissions control access to features and configuration options within the PBX Web Portal.
Administrators grant permissions to allow users to view or modify specific features. In some cases, permissions can be assigned to enable management of individual system components.
You may need to adjust permissions when, for example:
A user needs to manage other users.
A user needs to configure or manage SIP trunks.
Access and Manage Permissions
Sign in to the PBX Web Portal.
Go to Advanced > Roles.
Double-click a role to view its permissions.
Some permissions depend on others and cannot be disabled until the related permissions are disabled first.
SystemAdmin
Full system access. On Initial setup, the PBX maintainer.
Admin
Full Virtual PBX (for a tenant) access
All settings of the tenant
Plus Standard International
QueueManager
Managing and confining queues
View trunks
User management functions for all Users
Company reporting functionality
Plus Standard International
CDR log and Company reporting functionality
StandardInternationalUser
User-level access with international dialing access.
StandardUser
User-level access without international dialing access, but has domestic calls. This is the default role assigned to new Users.
User Permissions
This section describes each user permission, including its access level and functional scope.
User Voicemail
View Only Allows viewing the extension user’s voicemail.
Full Access Allows configuring and deleting the extension user’s voicemail.
User Meetings
View Only Allows viewing information about meetings created from the PortSIP ONE app.
Full Access Allows viewing, editing, and deleting meetings created from the PortSIP ONE app.
User Call Log
View Only Allows viewing the extension user’s call log.
Full Access Allows viewing and managing the extension user’s call log.
User Recordings
View Only Allows viewing the extension user’s call recordings.
Full Access Allows managing the extension user’s call recordings.
Features
Audit Allows viewing audit logs.
Events Allows viewing event logs.
Trunk
View Only Allows viewing trunk information.
Full Access Allows viewing and managing trunk settings.
Integrations
View Only Allows viewing integrations such as CRM, Microsoft 365, and Google Workspace.
Full Access Allows configuring integrations such as CRM, Microsoft 365, and Google Workspace.
CRM Contacts
View Only Allows viewing and searching CRM contacts.
Full Access Allows viewing, searching, creating, and editing CRM contacts.
Company (Tenant)
View Only Allows viewing tenant information.
Full Access Allows managing and configuring tenant settings.
Analytics
View Only Allows viewing analytics data, including reports, call history, call recordings, and external message history.
Full Access Allows managing analytics data, including reports, call history, call recordings, and external message history.
Company Recordings
View Only Allows viewing all call recordings within the tenant.
Full Access Allows managing all call recordings within the tenant.
Company Call Sessions
View Only Allows viewing active call sessions within the tenant.
Full Access Allows managing active call sessions within the tenant, such as ending calls.
Company Contacts
View Only Allows viewing company contacts within the tenant.
Full Access Allows viewing, searching, creating, and editing company contacts within the tenant.
Phone System
View Only Allows viewing phone system settings.
Full Access Allows managing and configuring phone system settings.
Call Policies
Domestic Calls Allows making domestic calls.
Internal Calls Allows making internal calls.
International Calls Allows making international calls.
Billing
View Only Allows viewing billing settings.
Full Access Allows managing and configuring billing settings.
Roles
View Only Allows viewing roles.
Full Access Allows creating, editing, configuring, and deleting roles.
Users
View Only Allows viewing extension users.
Full Access Allows creating, editing, and deleting extension users.
Last updated