product icon

What are the system roles and permissions?

Below is a list of all the system roles/permissions and their descriptions.

Important: Please excuse our mess while we improve your admin experience! We are in the process of migrating all accounts to the new GoTo Admin. The article below is meant for admins who use PBX Administration (classic) at If you're an admin who uses GoTo Admin at, please refer to: What is the difference between a role and a permission?
Note: The roles/permissions listed in this article, also apply if you Contact Support from any article on this site. Customer Support is unable to provide troubleshooting assistance unless the user has the applicable roles/permissions for the specific concern.


Table 1. General Roles and Permissions
Role/Permission Description
Super Administrator Super admins have access to modify all aspects of your system, including emergency location information.

Only Super admins can add other Super admins to the account, order new or transfer phone numbers, and authorize changes to the firewall and other network settings.
Admin (Configure PBX) Admins have access to modify most aspects of your system except permissions.

Admins cannot view the Account section with the admin portal, pay/view invoices, view reports, or access call recordings unless a Super admin has granted those permissions.
View Invoices Users have access to view invoices for the account.
Pay Invoices Users have access to pay invoices for the account. This permission is dependent on them having the View Invoices permission.
View Reports Users have access to system call reports.
Access Call Recordings Users have access to listen to any available call recordings in the call reports.
Table 2. Account Security
Setting Description
Phone Number Transfer PIN A four to eight-digit pin used to protect your phone numbers from being transferred without your authorization.


Table 3. Dialing Permissions
Permission Description
Internal Users can dial internal extensions.
Local Users can dial local numbers inside the area code defined on their line.
Domestic Long Distance Users can dial long distance numbers (including toll free numbers) outside the area code defined on their line, but within their country.
Note: This permission may not be applicable to all countries.
Domestic Mobile Users can dial mobile numbers. This allows user permission control in countries where it is more expensive to call mobile phones.
Note: This permission may not be applicable to all countries.
International Users can dial international numbers outside the region defined on their line; including US Territories and Foreign States. See our international rates.
Toll Numbers Users can dial numbers that assess per-minute charges (e.g., 1-900 numbers).
Malicious Area Codes Users can dial international numbers that are listed under NANPA (i.e., they are ten-digit dialable). These have extremely high per-minute rates and are often involved in scams.


Table 4. Automatic Network Authorization
Setting Description
Automatically Authorize Network with Provisioning Automatically adds a device’s network to the network list with registration privileges when it requests provisioning via HTTP. Devices that provision over TFTP are not automatically added at this time (e.g., the Cisco 7940 and 7960, and certain Cyberdata equipment). Set an expiration date for authorized networks as needed. An expiration of 0 days means the authorization will never expire.
Allow Non-Admins to Authorize Own Network Allows users to navigate to https://‹domain› (where ‹domain› is replaced with your unique domain found in parentheses at the top of the admin dashboard) to authorize the network currently being used. The network is then granted registration and provisioning privileges. Set an expiration date for authorized networks as needed. An expiration of 0 days means the authorization will never expire.


Table 5. Prompt Recording Permissions
Users can record sound clips and other users’ directory names on the system. Choose a user or user group to go to its settings.


Table 6. Monitoring Permissions
Setting Description
Use Simple Monitoring Permissions Users can monitor all lines on the system (full monitoring access).
Use ACL Monitoring Permissions Users can only monitor specific lines on the system (limited monitoring access).


Table 7. Voicemail Box Access Control
Setting Description
Use ACLs Admins control voicemail access from the Voicemail tab for each line, ring group, and shared voicemail box on the system. Only users listed within Permitted Users/Groups will be granted access to the voicemail box controls.
Use Voicemail Box Passwords The default voicemail access method where passwords are set to each individual mailbox. If multiple people need to access a voicemail box, the password must be communicated to each user.
Table 8. Receiving Faxes to Email
Setting Description
Allow Fax-to-Email Users with a direct phone number can receive incoming faxes to their email.
Article last updated: 6 December, 2022