You can administer authorization codes to manage access to your system. You can then use Call Detail Recording to track the use of authorization codes. Use the following guidelines to manage the use of authorization codes.

• Assign authorization codes that:

  • Are random, nonconsecutive, and unpredictable

  • Are the maximum code length that the system allows

  • Are unique to each person who uses an authorization code

  • Have the minimum level of calling permissions that a user requires

• Change codes frequently, at least quarterly.

• Delete codes when the codes are no longer needed.

• Delete codes when a user leaves the company, or changes job assignments.

• Use CDR reports to monitor and analyze the use of the codes.