Skip to content
FlySIPFlySIP Docs

Users and permissions

Three screens decide who can do what in the admin panel. Users holds the web logins of your staff: every person gets their own login instead of sharing yours. Access Levels defines which screens a web user may open and whether they may add, edit or delete there. Permissions sets what each of your resellers may manage in its own panel.

Where to find it

Section titled “Where to find it”
Screen Menu URL
Users System Management → Users /web_users.php
Access Levels System Management → Access Levels /access_levels.php
Permissions My Customers → Permissions /access.php

Users is shown to customers with system management rights. Access Levels is shown to the root customer only. Permissions is shown when you may edit resellers. A web user with a restricted access level sees none of the three.

Screenshot "admin-panel/web-users-list" has not been generated yet — see scripts/screenshots/screens.yml.

Users

Section titled “Users”

Every customer has a default user: the Web Login and Web Password set on the customer form. Users lists it together with the extra web users you create.

Column Meaning
Status Green check Active or red ban Blocked
Name The user’s name, linking to the form
Description Free text from the form
Access Level The access level that limits the user

The filter matches Name with is like or is not like. It is case-insensitive and matches the whole name unless you add %: %support% finds every name containing support.

Each row has Login as, Block or Unblock, and Delete. The default user has none of them, and the support user cannot be blocked or deleted.

Create a user

Section titled “Create a user”
  1. Click Add User.
  2. Enter Name. Leaving the field fills Web Login from it; change it if you want.
  3. Note the generated Web Password or type your own. It must satisfy the password policy of your customer.
  4. Select Access Level. See Access levels.
  5. Check Time Zone and Language; both default to your own.
  6. On Advanced Parameters, enter E-Mail and select Download Format and Start Page, the page the user sees after login.
  7. On Web Access Control, enter Allowed Hosts if the user may log in only from known addresses.
  8. Click Save & Close.

Name must be unique among your users, Web Login across the whole environment. Both comparisons ignore case.

Field Meaning
Last Login Date, Last Pass. Change Read-only, on the Info tab of an existing user
Web Password Shown as @@@@@@ on an existing user; type a new one to change it
Allowed Hosts IPv4 addresses separated by commas, for example 203.0.113.10, 203.0.113.11. Empty or Any allows any address. Subnets are not accepted
Reset MFA Configuration Shown when MFA is enabled in System Parameters. The user sets up MFA again at the next login

On the default user, Name and Access Level cannot be changed, and only the root customer can change its Web Login.

Block, delete and log in as a user

Section titled “Block, delete and log in as a user”

Block asks for confirmation and logs the user out of every open session at once. A blocked user cannot log in until you click Unblock. Delete removes the user permanently. Login as opens the panel as that user, which is the quickest way to check what an access level shows.

Access levels

Section titled “Access levels”

An access level is a named set of rights. The left side of Access Levels lists the levels with the number of users on each; the right side shows the permission matrix of the selected level.

Screenshot "admin-panel/access-levels" has not been generated yet — see scripts/screenshots/screens.yml.

The matrix has one row per page, grouped as General, Accounts / Resellers / Vendors, CDRs, Reports, Routing & Rates, Tools, Callshop and Preferences. View makes the page visible; Add, Edit and Delete allow those operations on it. Ticking any of them also grants View. The checkbox under a column header toggles the whole column. Click Save to apply.

A user with a restricted level sees in the sidebar only the pages the level allows. Pages that are not in the matrix, such as System Parameters, Users or Payment Processors, cannot be opened at all. Only a full-access level reaches them.

Five levels come with the switch:

Level Default rights
Administrator Full access to everything. The matrix does not apply; the level cannot be edited or deleted
Reporter View only: accounts, resellers and vendors with their balances, payments history, CDRs, reports, active calls, tariffs, termination routes and routing groups
Billing Edit accounts, resellers and vendors; view their balances, payments history, CDRs and reports
Callshop Operator Full rights on Callshop, Callshop Preferences, customer CDRs and active calls
NOC View only: active calls, CDRs, ASR/ACD, monitoring, Test Dialplan, SIP logs, traffic capture, Looking Glass and firewall rules

All levels also include My Preferences (Web User). The built-in levels other than Administrator can be edited but not deleted. Access levels are shared by the whole environment: a change applies to the web users of every customer that uses the level.

Add an access level

Section titled “Add an access level”
  1. Click Add Access Level.
  2. Enter Name, up to 64 characters.
  3. Select Copy permissions from: the level to start from. The new level never gets full access, even when copied from Administrator.
  4. Click Create.
  5. Adjust the matrix and click Save.

Rename changes the name of a level. Delete works only when no web user has the level; reassign them first.

Permissions of resellers

Section titled “Permissions of resellers”

Permissions sets what each of your direct resellers may do in its own panel. Every row is one reseller; tick the rights and click Set in that row. Columns for rights you do not have yourself are not shown, so you can never grant more than you have.

Column Meaning
Accounts + e - Add, edit and delete its accounts
Resellers + e - Add, edit and delete sub-resellers. Shown when your own Max. Resellers Depth is above 1
Tariffs + e - Add, edit and delete tariffs and rates
Vouchers + e - Add, edit and delete top-up vouchers. See Top-up vouchers
System Mgmt System management rights, including the Users screen
Assign Own Tariff Offer - MY TARIFF -, the tariff the reseller pays you, to its own customers
API Turn on Allow API Calls for its own customers
DID Pool, IVR Apps, ASR/ACD, Statistics, Cards Mgmt, Conferencing Access to these modules
Share Payment Procs Share its payment processors with its own resellers

Removing System Mgmt, DID Pool, IVR Apps, ASR/ACD, Statistics, Cards Mgmt or Conferencing removes the right from the reseller’s whole branch. Removing Share Payment Procs removes the processors it shared.

Section titled “Related pages”