Configuring authorization codes

Last Updated : Apr 21, 2016 |
Note:

For Release 9.1 and higher, you can no longer associate Authorization Code entries with User Rights. Authorization Code configured in that way are removed during the upgrade.

Authorization codes are enabled by default.

A user dials a number that matches a short code set to Force Authorization Code. The user is prompted to enter an authorization code.

They dial their authorization code. If a matching entry is found in Authorization Codes records the system checks the corresponding user. Note that the user checked does not necessarily need to be connected with the user dialing or the user whose extension is being used to make the call.

The dial string is checked against the short codes with the matching user. If it matches a dial short code or no short code the call is allowed, otherwise it is blocked. Note that the short code is not processed, it is just checked for a match. If multi-tier authorization codes are required there must be blocking (busy) short codes (or a wild card '?' )

Example

A restaurant has a number of phones in publicly accessible areas and want to control what calls can be made by staff. Staff must not be able to dial long distance numbers. staff should be able to dial local and cell phone numbers.

ARS Table

In the Main (50) ARS table, add the following short codes:

  • 044XXXXXXXXXX/Dial/044N/

  • 01XXXXXXXXXX/Dial/01N/Force Auth Code checked

Authorization Codes

Configure an authorization code for each staff member that is allowed to make long distance calls. For example, for staff members Alice and Bob:

AuthCode: 2008 - Alice

AuthCode: 1983 - Bob 

It is recommended to use short codes that use X characters to match the full number of characters to be dialed. That ensures that authorization code entry is not triggered until the full number has been dialed rather than mid-dialing. For example 09 numbers are premium rate in the UK, so you would create a 09XXXXXXXXX/Dial/N short code set to Forced Authorization. In the associated user or user right short code it is recommended to use 09N type short codes.

System short codes that route to ARS will not have their Force Authorization Code setting used. However short codes within an ARS table will have their Force Authorization Code setting used.

Forcing Authorization Codes

There are two methods to force a user to enter an authorization code in order to complete dialing an external call.

  • To Force Authorization Codes on All External Calls A user can be required to enter an authorization code for all external calls. This is done by selecting Force Authorization Code (User | Telephony | Supervisor Settings).

  • To Force Authorization Codes on Specific Calls To require entry of an authorization code on a particular call or call type, the Force Authorization Code option should be selected in the short code settings. This can be used in user or system short codes in order to apply its effect to a user or all users respectively. You need to ensure that the user cannot dial the same number by any other method that would by pass the short code, for example with a different prefix.