Role-based access control

8x8 Role-based access control (RBAC) is a mechanism around roles and privileges to manage 8x8 Work administration. It allows you to assign permissions to users based on their role within an organization. RBAC lets users have access rights only to the information they need to do their jobs and prevents them from accessing information that doesn't pertain to them. Roles can be used to address multiple needs of your business, from security and compliance, over efficiency and cost control.

Let’s say your business needs a role with permissions to configure the entire phone system, a role with permissions to just create sites and users, and another role to manage work groups such as call queues and paging groups. 8x8 RBAC now offers system-defined roles and the ability to create custom roles with site specific scope to meet the varying needs.

Availability

This feature is currently available to all 8x8 customers.

Features

Manage 8x8 Work administration more efficiently by granting access rights to specific phone system functionality
Use roles to distribute 8x8 phone system and contact center admin duties within your team
Access readily available predefined roles allowing full access or partial access
Create custom roles with site specific scope
Customize role permissions to suit your business needs
Define roles with access to specific 8x8 applications
Assign any number of roles to a user based on the duties they perform
Allow users to manage a single site or multiple sites
Create admin roles to exclusively manage 8x8 ordering, billing, and cost centers
Assign roles to administrators for improved efficiency

8x8 predefined roles

Roles are permission sets that control access to areas and features within the 8x8 phone system configuration tool. You can distribute duties within your team and grant access to features that are relevant to performing their job. 8x8 now introduces role-based access control for 8x8 Work administrators. Company admin roles with full access to the 8x8 Admin Console application have been available until now. In this release, we offer the following new roles and the ability to create a custom role.

Basic Admin: This role offers basic access to 8x8 Admin Console.
Company Admin: This role offers full access to 8x8 Admin Console including users, phone numbers, devices, workgroups and beyond. They do not have access to the 8x8 Admin Console.application.
IT Admin: This role offers access to users and workgroups in 8x8 Admin Console. This allows them to create and manage users and their work group permissions.
My8x8 Admin: This role offers access to 8x8 Billing, Ordering, and Cost centers along with privileges to submit and manage cases. This role can be cloned and modified for granular access to specific functionality. Let's say you wish to create roles with exclusive access to billing or ordering, simply clone this role and modify the granular access. Learn more.
VCC Admin: This role offers access to the 8x8 Configuration Manager application only. The role will not have access to the 8x8 Admin Console application. They can configure their contact center using the 8x8 Configuration Manager app. They are unable to add users or assign licenses to users.

Use Case

Let's say your company has users distributed in multiple cities such as San Francisco, London, New York, and Sydney. As a phone system admin for your company, you have created a separate site for each location and grouped users and services per site. With RBAC, you can now define a site specific admin who will oversee all 8x8 functionality for that specific site. As a primary admin, to access all functionality for all sites, you can assign yourself with the Company Admin role with company wide scope. Learn more about how to create a site admin.

Access roles and assignments

As an 8x8 phone system administrator, you can now access predefined roles, create custom roles, assign roles to users, all using the Role-based access control feature.

Log into 8x8 Admin Console.
From the menu, go to Roles and Permissions > Roles.
View the list of predefined roles available to your organization.

Note: The VCC-admin role is available only if your company subscribes to 8x8 Contact Center services.
View the permissions of any role by simply clicking . It opens up the role and its assigned permissions.

Note: You cannot delete or edit permissions of system-defined roles. To customize a system-defined role, simply clone it, and edit the permissions as you wish.

Create a custom role

Wish to create a custom role with specific permissions in the 8x8 Admin Console? Let’s say you want a role with permissions to access just call queues, paging groups, and BMW (Barge Monitor Whisper) groups. You can now create a custom role, select the desired permissions, and save the role. You can then assign the custom role to any user. You can also clone a system-defined role, modify the permissions, and save it.

You can also assign roles with site specific scope. Let's say you want a user to be the Company admin but for a specific site, simply limit the scope to the desired site.

Note: Devices, licenses, and phone numbers are not site aware. For example, a site admin can view all devices available to the company not just the devices assigned specifically to the site they have access to.

To create a custom role:

In the Roles page, click +Create role on the upper-right corner.
In the following page, under Details, enter a role name.
From the list of permissions, select the permissions you want to assign to this custom role.
Click Save. The new custom role is now listed along with other roles

Note:You can also clone a system-defined role and modify the permissions as needed to create a new role.

Assign roles

You can assign any role defined in your phone system to users. Simply select a user and assign single or multiple roles. Assign company wide access or limit the user to a specific site scope. Let's say you want to create a site admin for your San Jose office, simply assign the Company Admin role to the user and change the scope the San Jose site.

To assign a role:

From the menu, go to Roles and Permissions >Assignments.
In the Role Assignments page, click +Create Assignment on the upper-right corner.
In the Create assignments pop-up, select the user from the list.
Set the scope to company or to a single site or multiple sites.
Select the role you wish to assign.
Optionally, to assign multiple roles to the user, click +Add assignment.
Click Save. View the user you just assigned with a new role in the assignments list.

Create a site admin

To create a site admin:

From the menu, go to Roles and Permissions > Assignments.
In the Role Assignments page, click +Create Assignment on the upper-right corner.
In the Create assignmentspop-up, select the user from the drop-down.
Select the Company Admin role you wish to assign.
Select the scope to a single site or multiple sites. Simply select the sites from the menu.
Click Save.View the user you just assigned with a new role in the assignments list.

Create a billing or ordering admin

When you assign the My8x8 role to an admin, they get full access to the My8x8 portal with the following capabilities:

Manage 8x8 billing and cost centers
Manage 8x8 Ordering

Note: The My8x8 Admin role is not site aware. It is set to company wide access.

Let's say you wish to create roles with exclusive access to billing or ordering, simply clone the default My8x8 Admin role and modify the granular access. Follow the steps described here.

Verify the role assignment

Log in as the user assigned with the Work Groups Manager role or any user with a role.
From the application panel, select 8x8 Admin Console.
Notice that you have access to only the permissions available to the role.