Working within a Multi-Tenancy Environment Configuring Multi-Tenancy
Polycom, Inc. 497
Note that if a conference has participants, rooms, and/or guests from multiple
areas, then Resource Manager users will be able to see the area names of only
the areas that they belong to or can manage. Participants, rooms and guests
that belong to other areas are presented as a “Guest of” the conference’s area.
Area Address Books
An address book must belong to only one area or to no area, but can contain
users, endpoints, rooms and guests from multiple areas.
An address book is accessible to only users who are also assigned to the area
that the address book belongs to. That is, if a user has a system role, they will
see all address books, but if a user has only an area roles, they will see only
address books that belong to the areas that they belong to or to areas in which
they manage.
When a user views the contents of an address book that has members from
multiple areas, they will be able to view only those members that belong to
areas the user has access to. That is, if a user has a non-area-specific role, they
will be able to see address book members from all areas, but if a user has only
area-specific roles, they will see only members that belong to the areas they
manage.
From an endpoint, an address book is accessible only if the logged in user and
address book belong to the same area or if the logged in user manages the area
the address book belongs to. When an endpoint user views the contents of a
cross-area address book, the address book members they can see include:
• Members that belong to the same area as the user who is logged in to the
endpoint
• Members that belong to other areas that the logged in user manages
Also note that changing the area that an address book is assigned to does not
affect the areas of its members.
Area User Groups
User groups can be assigned to one area or no area. Although it can contain
users from multiple areas. Users with the system role of administrator or the
role of area administrator are allowed to create and edit user groups. If the area
administrator manages more than one area, he can add users from any area
that he manages to the user group. Remember that system administrators are
automatically have permission to view/manage all areas, and can therefore
add any user to a user group.
However, even if a group has users from multiple areas, area administrators
can only view users within the group that belong to the areas they manage.
Changing the area of the group does not affect the area of the users in the
group.
