User & Group Permissions

This page allows you to define which users and groups can access ZPM and their respective permission levels within the application.

How to Grant Users or Groups Access

  1. Click the “Add User” or Add Group" button.
  2. Search for Microsoft 365 user or group who need access to ZPM.
  3. Assign the required role and save.
  4. Additionally, you can limit the Helpdesk role to specific dial plan groups.

Information about Groups and Users

  • When a user has permissions defined directly and through a group, the directly defined permission takes priority.
  • If a user belongs to multiple groups with different permissions, the group with the highest permission level takes priority.
  • If using SAML SSO, users and groups added to this list must also be configured for single sign-on into ZPM. See guide Setting Up SAML SSO for ZPM with Azure IdP.

Information about Users from external tenants

  • ZPM allows you to grant access to users from external tenants. Like users from your tenant, external users can have “Administrator” or “Helpdesk” privileges.
  • Before adding users from external tenants, ensure that OIDC is enabled and SAML SSO is disabled.
  • You cannot add users from external tenants via groups; they must be managed individually.

Regarding Restrictions on Helpdesk Dial Plan Group Access

  • Leaving the “Limit Helpdesk to these dial plan groups” list empty grants access to all groups.
  • If a user belongs to multiple groups with dial plan restrictions, their access will be based on the combination of those groups’ restrictions.