Role-based access control

8x8 Role-based access control (RBAC) is a mechanism around roles and privileges to manage Virtual Office administration. It allows you to assign permissions to users based on their role within an organization. RBAC lets users have access rights only to the information they need to do their jobs and prevents them from accessing information that doesn't pertain to them. Roles can be used to address multiple needs of your business, from security and compliance, over efficiency and cost control.

8x8 introduces Role-based access control (RBAC) to its phone system users. Let’s say your business needs a role with permissions to configure the entire phone system, a role with permissions to just create sites and users, and another role to manage work groups such as call queues and paging groups. 8x8 RBAC now offers system-defined roles and the ability to create custom roles with site specific scope to meet the varying needs .

Limited Availability

This feature is currently in limited availability. It is available to select 8x8 customers only.

Features

8x8 roles

Roles are permission sets that control access to areas and features within the 8x8 phone system configuration tool. You can distribute duties within your team and grant access to features that are relevant to performing their job. 8x8 now introduces role based access control for Virtual Office administrators. Company admin roles with full access to the VO-Configuration Manager application have been available until now. In this release, we offer the following new roles and the ability to create a custom role.

Use Case

Let's say your company has users distributed in multiple cities such as San Francisco, London, New York, and Sydney. As a phone system admin for your company, you have created a separate site for each location and grouped users and services per site. With RBAC, you can now define a site specific admin who will oversee all 8x8 functionality for that specific site. As a primary admin, to access all functionality for all sites, you can assign yourself with the Company Admin role with company wide scope.

Manage roles and assignments

As an 8x8 phone system administrator, you can now access system-defined roles, create custom roles, assign roles to users, all using the Role Based Access Control feature.

  1. Log into VO-Configuration Manager.
  2. From the menu, go to Roles and Permissions > Roles.

  3. View the list of system-defined roles available to your organization.

    Note: The VCC-admin role is available only if your company subscribes to 8x8 Contact Center services.

  4. View the permissions of any role by simply clicking . It opens up the role and its assigned permissions.

Note: You cannot delete or edit permissions of system-defined roles. To customize a system-defined role, simply clone it, and edit the permissions as you wish.

Create a custom role

Wish to create a custom role with specific permissions in the VO-Configuration Manager? Let’s say you want a role with permissions to access just call queues, paging groups, and BMW (Barge Monitor Whisper) groups. You can now create a custom role, select the desired permissions, and save the role. You can then assign the custom role to any user. You can also clone a system-defined role, modify the permissions, and save it.

You can also assign roles with site specific scope. Let's say you want a user to be the Company admin but for a specific site, simply limit the scope to the desired site.

Note: Devices, licenses, and phone numbers are not site aware. For example, a site admin can view all devices available to the company not just the devices assigned specifically to the site they have access to.

To create a custom role:

  1. In the Roles page, click +Create role.
  2. In the following page, enter a role name.
  3. From the list of permissions, select the permissions you want to assign to this custom role.

  4. Click Save.
  5. Note the new custom role is now listed along with other roles.
  6. You can also clone a system-defined role and modify the permissions as needed.

Assign roles

You can assign any role defined in your phone system to users. Simply select a user and assign single or multiple roles. Assign company wide access or limit the user to a specific site scope. Let's say you want to create a site admin for your San Francisco office, simply assign the Company Admin role to the user and change the scope the San Francisco site.

To assign a role:

  1. From the menu, go to Roles and Permissions and select Assignments.
  2. Click +Create Assignment on the right hand top corner.
  3. In the pop-up, select the user from the drop-down.
  4. Set the scope to Company or to a single site or multiple sites.

  5. Select the role you wish to assign.
  6. To assign multiple roles to the user, click +Add assignment.
  7. Click Save.
  8. Go to Roles and Permissions > Assignments. View the user you just assigned with a new role.
    .

Create a site admin

  1. From the menu, go to Roles and Permissions and select Assignments.
  2. Click +Create Assignment on the right hand top corner.
  3. In the pop-up, select the user from the drop-down.
  4. Select the Company Admin role you wish to assign.
  5. Select the scope to a single site or multiple sites. Simply select the sites from the menu.

  6. Click Save.
  7. Go to Roles and Permissions > Assignments. View the user you just assigned with a new role.
    .

Verify the role assignment

  1. Log in as the user assigned with the Work Groups Manager role or any user with a role.
  2. Notice that you have access to only the permissions available to the role.