User authorization for administrator logins for Communication Manager servers is specified and controlled by assignment to Linux groups. Each login must be assigned to at least one primary Linux group susers or users plus one or no profile group, prof18 to prof69. When a login is assigned to a Linux group, the user gains access based on the permissions for the group.

Assign logins to susers carefully. suser logins have privileged access to the server including the ability to modify many critical system files, and the ability to add, remove and modify system logins.

For login access based on user profiles, create new Linux groups in the range 10,020 - 10,069. Avaya recommends the group name be in the form prof-nn where nn is the group number. For example, create prof22 for the Linux group corresponding to access profile 22. Prof22 is assigned the group number 10,022. With this naming convention, if a system’s existing Linux groups require that the base value (10,000) be changed through the Web Access Mask page, that page will search for groups named in this manner and convert the group numbers to the new base. Groups not named in this manner will not be converted.

Pre-release 4.0 Communication Manager software sets Linux groups as shown in the table. Communication Manager Release 4.0 and later application software is independent of these fixed assignments, but the web interface requires the assignments.