34 Open Provisioning Interface overviewand the action is not performed. For more information on administrationprivileges and domain access rules, see Provisioning Client User Guide(NN42020-105).Domain-level authorizationEach administrator is assigned one or more domains for access andcontrol, which can be overridden by the All domain access in rolecreation. For instance, the MCS system might consist of three separatedomains, Widget.com, Gadget.com, and Sprocket.com. An administrator,WidgetAdmin, can be created with only Widget.com in the list ofprovisionable domains. This limits WidgetAdmin to provisioning activitiesinside the Widget.com domain only, and does not permit access to the otherdomains. Therefore, if a request from WidgetAdmin comes in to modifya user outside of the Widget.com domain, it is rejected because it failedauthorization. In addition, attempts to list domain information can onlyreturn Widget.com information.Provisioning-level authorizationThe Provisioning Manager of the MCS system is broken into variousmajor categories (Domains, Users, Telephony Routes, and so on). Theprovisioning system enables the creation of various administrator rolesacross these categories. Upon creation, the administrator is assignedto a particular role. This enables the service provider to create variousadministrator roles to suit specific needs. In each category, the role canhave any combination of the following rights: Read, Write, and Delete. Forexample, a user admin role can be created which gives the ability to readdomain information, and to read, modify, and delete user information. Theadministrators given this role cannot manipulate the telephony routes, orother areas of the MCS system. OPI authorizes each request to verify thatthe incoming credentials have the appropriate role to perform the givenaction.Provisioning interfaceThe following list is a summary of the provisioning object types containedwithin the WSDL. Detailed information on the provisioning objects and theirtypes can be found in the WSDL file.• simple types:— Boolean— Byte— Double— Float— Integer— LongNortel Multimedia Communication Server 5100Application Programming Interfaces ReferenceNN42020-146 01.07 StandardRelease 4.0 19 October 2007Copyright © 2007, Nortel Networks.
