product icon

What is the difference between a role and a permission?

A description of system defined user roles, custom roles you can create for your account, and a list of the available permissions that are associated with roles.
Note: The permissions listed in this article, also apply if you Contact Support from any article on this site. Customer Support is unable to provide troubleshooting assistance unless the user has the applicable roles/permissions for the specific concern.

Important: Please excuse our mess while we improve your admin experience! We are in the process of migrating all accounts to the new GoTo Admin. Choose your current admin experience for the applicable steps on this topic.

Goto Admin

If you're an admin who signs in at https://admin.goto.com, these steps are for you.

Roles

These are labels that you assign to a user to give them a pre-determined group of permissions. Here are the system defined roles:
  • Super admin: User has all system permissions.
  • Admin: User has all system permissions except the ability to add Super admins, manage other Admins, view reports and manage billing information. Admins cannot view the Account section with the admin portal, pay/view invoices, view reports, or access call recordings unless a Super admin has granted those permissions.
  • Member: User does not have any system permissions and cannot access the GoTo Admin portal. Cannot add new users, troubleshoot other's devices, They are an end user only.

If you need to change an existing user's role, refer to How do I change a user's role?

If you need a role with different permissions than the system defined roles listed above, you can create a custom role. To create a custom role, refer to How do I manage my roles? The next section contains a list of available permissions which can be used in a custom role.

Permissions

Here are the system permissions currently available which can be used in a custom role:
  • Manage licenses: Allows user to assign and revoke product licenses.
  • Manage users: Allows user to add, delete, and edit user details.
    • Manage user product settings: A subset of the Manage Users permission that allows the user to make changes to product settings for other users.
  • Manage user groups: Allows user to add, delete, and edit user groups.
  • Manage device groups: Allows user to add, delete, and edit device groups.
  • Manage settings templates: Allows user to add, delete, and edit the settings templates.
  • Access user history, usage, and data: Allows user to view and export user history, usage and data.
    • Access call recordings: A subset of the Access user history, usage, and data permission that allows the user to access call recordings.
  • Access invoices: Allows user to access the billing portal to view invoices.
    • Pay invoices: A subset of the Access invoices permission that allows the user to pay invoices through the billing portal.

PBX Administration (classic)

If you're an admin who signs in at https://my.jive.com/pbx, these steps are for you.

General

General Roles and Permissions
Role/Permission Description
Super Administrator Super admins have access to modify all aspects of your system, including emergency location information.

Only Super admins can add other Super admins to the account, order new or transfer phone numbers, and authorize changes to the firewall and other network settings.
Admin (Configure PBX) Admins have access to modify most aspects of your system except permissions.

Admins cannot view the Account section with the admin portal, pay/view invoices, view reports, or access call recordings unless a Super admin has granted those permissions.
View Invoices Users have access to view invoices for the account.
Pay Invoices Users have access to pay invoices for the account. This permission is dependent on them having the View Invoices permission.
View Reports Users have access to system call reports.
Access Call Recordings Users have access to listen to any available call recordings in the call reports.
Account Security
Setting Description
Phone Number Transfer PIN A four to eight-digit pin used to protect your phone numbers from being transferred without your authorization.

Dialing

Dialing Permissions
Permission Description
Internal Users can dial internal extensions.
Local Users can dial local numbers inside the area code defined on their line.
Domestic Long Distance Users can dial long distance numbers (including toll free numbers) outside the area code defined on their line, but within their country.
Note: This permission may not be applicable to all countries.
Domestic Mobile Users can dial mobile numbers. This allows user permission control in countries where it is more expensive to call mobile phones.
Note: This permission may not be applicable to all countries.
International Users can dial international numbers outside the region defined on their line; including US Territories and Foreign States. See our international rates.
Toll Numbers Users can dial numbers that assess per-minute charges (e.g., 1-900 numbers).
Malicious Area Codes Users can dial international numbers that are listed under NANPA (i.e., they are ten-digit dialable). These have extremely high per-minute rates and are often involved in scams.

Network

Automatic Network Authorization
Setting Description
Automatically Authorize Network with Provisioning Automatically adds a device’s network to the network list with registration privileges when it requests provisioning via HTTP. Devices that provision over TFTP are not automatically added at this time (e.g., the Cisco 7940 and 7960, and certain Cyberdata equipment). Set an expiration date for authorized networks as needed. An expiration of 0 days means the authorization will never expire.
Allow Non-Admins to Authorize Own Network Allows users to navigate to https://‹domain›.onjive.com/addNetwork (where ‹domain› is replaced with your unique domain found in parentheses at the top of the admin dashboard) to authorize the network currently being used. The network is then granted registration and provisioning privileges. Set an expiration date for authorized networks as needed. An expiration of 0 days means the authorization will never expire.

Prompts

Prompt Recording Permissions
Description
Users can record sound clips and other users’ directory names on the system. Choose a user or user group to go to its settings.

Monitoring

Monitoring Permissions
Setting Description
Use Simple Monitoring Permissions Users can monitor all lines on the system (full monitoring access).
Use ACL Monitoring Permissions Users can only monitor specific lines on the system (limited monitoring access).

VM/Fax

Voicemail Box Access Control
Setting Description
Use ACLs Admins control voicemail access from the Voicemail tab for each line, ring group, and shared voicemail box on the system. Only users listed within Permitted Users/Groups will be granted access to the voicemail box controls.
Use Voicemail Box Passwords The default voicemail access method where passwords are set to each individual mailbox. If multiple people need to access a voicemail box, the password must be communicated to each user.
Receiving Faxes to Email
Setting Description
Allow Fax-to-Email Users with a direct phone number can receive incoming faxes to their email.
Article last updated: 14 June, 2023