product icon

What are the system permissions?

    Below is a list of all the system permissions and their descriptions.

    Important: Please excuse our mess while we improve your admin experience! We are in the process of migrating all accounts to the new GoTo Admin. The article below is meant for admins who use PBX Administration (classic) at If you're an admin who uses GoTo Admin at, please refer to: What is the difference between a role and a permission?
    Note: The permissions listed in this article, also apply if you Contact Support from any article on this site. Customer Support is unable to provide troubleshooting assistance unless the user has the applicable roles/permissions for the specific concern.


    Table 1. General Permissions
    Permission Description
    Super Administrator Super Admins have access to modify all aspects of your system, including the contact center portal and emergency location information.

    Only Super Admins can add other Super Admins to the account, order new or transfer phone numbers, and authorize changes to the firewall and other network settings.
    Admin (Configure PBX) Admins have access to modify most aspects of your system except permissions.

    Admins cannot view the Account section with the admin portal, pay/view invoices, view reports, or access call recordings unless a Super Admin has granted those permissions.
    View Invoices Users have access to view invoices for the account.
    Pay Invoices Users have access to pay invoices for the account. This permission is dependent on them having the View Invoices permission.
    View Reports Users have access to system call reports and the real time and history pages in the contact center portal.
    Access Call Recordings Users have access to listen to any available call recordings in the call reports.
    Table 2. Account Security
    Setting Description
    Phone Number Transfer PIN A four to eight-digit pin used to protect your phone numbers from being transferred without your authorization.


    Table 3. Dialing Permissions
    Permission Description
    Internal Users can dial internal extensions.
    Local Users can dial local numbers inside the area code defined on their line.
    Domestic Long Distance Users can dial long distance numbers (including toll free numbers) outside the area code defined on their line, but within their country.
    Note: This permission may not be applicable to all countries.
    Domestic Mobile Users can dial mobile numbers. This allows user permission control in countries where it is more expensive to call mobile phones.
    Note: This permission may not be applicable to all countries.
    International Users can dial international numbers outside the region defined on their line; including US Territories and Foreign States. See our international rates.
    Toll Numbers Users can dial numbers that assess per-minute charges (e.g., 1-900 numbers).
    Malicious Area Codes Users can dial international numbers that are listed under NANPA (i.e., they are ten-digit dialable). These have extremely high per-minute rates and are often involved in scams.


    Table 4. Automatic Network Authorization
    Setting Description
    Automatically Authorize Network with Provisioning Automatically adds a device’s network to the network list with registration privileges when it requests provisioning via HTTP. Devices that provision over TFTP are not automatically added at this time (e.g., the Cisco 7940 and 7960, and certain Cyberdata equipment). Set an expiration date for authorized networks as needed. An expiration of 0 days means the authorization will never expire.
    Allow Non-Admins to Authorize Own Network Allows users to navigate to https://‹domain› (where ‹domain› is replaced with your unique domain found in parentheses at the top of the admin dashboard) to authorize the network currently being used. The network is then granted registration and provisioning privileges. Set an expiration date for authorized networks as needed. An expiration of 0 days means the authorization will never expire.


    Table 5. Prompt Recording Permissions
    Users can record sound clips and other users’ directory names on the system. Choose a user or user group to go to its settings.


    Table 6. Monitoring Permissions
    Setting Description
    Use Simple Monitoring Permissions Users can monitor all lines on the system (full monitoring access).
    Use ACL Monitoring Permissions Users can only monitor specific lines on the system (limited monitoring access).


    Table 7. Voicemail Box Access Control
    Setting Description
    Use ACLs Admins control voicemail access from the Voicemail tab for each line, ring group, and shared voicemail box on the system. Only users listed within Permitted Users/Groups will be granted access to the voicemail box controls.
    Use Voicemail Box Passwords The default voicemail access method where passwords are set to each individual mailbox. If multiple people need to access a voicemail box, the password must be communicated to each user.
    Table 8. Receiving Faxes to Email
    Setting Description
    Allow Fax-to-Email Users with a direct phone number can receive incoming faxes to their email.
    Article last updated: 6 December, 2022