Authorization in mgr

[VladimirShushkov]

Hi, colleagues!

I have problems with setting up authorization on OXE. According to organization information security policy I need to set up PBX in such way:
user1 is main admin, so he can use mgr tool with write permissions
user2 is readonly admin, so he can see PBX settings only
user3 cannot use mgr application.
As I understand the part "Access Control to mgr" of OXE guide describe information that I need.
Firstly I started RADIUS server based on Microsoft IAS in Active Direcory domain. Then I created three domain users user1, user2, user3 and changed users' settings so that users can be authenticated on PBX (Store password in reversible form etc).
Using swinst tool I changed OXE configuration to use RADIUS server for authentication and created user accounts user1, user2, user3 with mtcl rights. All created accounts can log in to PBX and start mgr successful. Then I need to restrict access to mgr. The problem is the information in guide in very unclear. According to the guide I enabled the authorization feature for mgr via the swinst tool for all three accounts.
Then I created usernames user1 and user2 (because they should have access to mgr) in the section "Security and Access Control > User Access Control": account user1 has all rights and account user2 has read only rights. All accounts in default domain 0. The situation with user lists is absolutely confused for me.
I created user list 2 in the section "Security and Access Control > Station Access Control " and chose not to use broadcast in the section "Security and Access Control > List Access Control" for user list 2.
But instead of this configuration all three accounts have access to mgr and can change OXE config.
What is wrong in my tryings? Can I restrict mgr access to mentioned user accounts?

Thank you very much.

I use several OXEs with software version 9 and 10.

Thank you.

[oldboy]

You can via 4760 using the above method i dont believe you can restrict using command line...