Auerswald COMpact 5000R, Advanced Information

Page: 213 / 1388

Protection from Unauthorised Access
COMpact 5000/R - Firmware V7.4A - Advanced Information V13 06/2019
- 213 -
Note: If the sub-administrator enters his internal number as user
name, this registration is recognised as an user login and the Web
interface is presented in user-mode.
Users (internal subscribers)
The user is any internal subscriber of the PBX. For each user, a user PIN
is generated. The access authorisations to the Web interface are assigned
to the user by the administrator according to local requirements. The
possible range of page releases is limited to a very small number of own
subscriber and group settings.
Each user has the same access authorisations. There modification rights
may differ depending on the profiles.
Additional app passwords for subscribers
The subscriber password is used for SIP registration and the access to
the Configuration Manager and API. Therefore, PBX access data must
frequently be saved in external systems. This will lead to security risks, if
these systems are insufficiently secured.
Therefore, additional subscriber passwords for accessing the
Configuration Manager or API or for accessing Action URLs can be
generated.
If an app password has been generated for the subscriber and the
corresponding access authorisation has been enabled, the previous
subscriber password loses the access authorisation for the correspondig
application.
All generated passwords are listed in the table under
Synthèses > Mots
de passe abonné supplémentaires . The passwords can be generated
system-wide or for subscribers, although system-wide passwords can only