Using Zoom Phone role management
You can use the role management feature to control access to features and settings in the Zoom web portal. For example, you can assign phone users A and B as members of the call queue admin role so that they can manage specific call queues. You can then assign user A to the billing call queue, and user B to the sales call queue.
Notes:
- To allow users to view and/or edit all Zoom Phone settings in the web portal, you can assign them the Phone Management role using account-level role management. Alternatively, you can use the Phone Super Admin role detailed in this article.
- Zoom Phone roles don't have access to group and account-level phone policy settings. To grant access to these settings, you need to use account-level role management. Refer to the list of required privileges for more information.
This article covers:
Default roles
There following are the default Zoom Phone roles that you can use:
Role name | Level of access |
Phone Super Admin | All Zoom Phone features and settings in the web portal. |
Phone Site Admin | Zoom Phone features and settings for a specific site, excluding settings that can only be changed at the account level. |
Call Queue Admin | Features and settings for the specified target call queues, included associated call logs and recordings. |
Auto Receptionist Admin | Features and settings for the specified target auto receptionist. This doesn't include access to the associated call logs. |
Recording Admin | Full privileges to view, play, download, or delete call recordings that belong to users and call queues. |
Compliance Admin | Full privileges to view and manage call logs, recordings, voicemail, and SMS. |
To use these roles, follow the sections below to assign members and targets.
Notes:
- The Phone Super Admin role doesn't require targets since it applies to all features and settings in the web portal.
- You can't directly change the privileges for the default roles. You can duplicate the role and then change the privileges.
How to search for a Zoom Phone role
- Sign in to the Zoom web portal as the account owner or someone who has access to edit roles.
- In the navigation menu, click User Management then Roles.
- Click the Phone tab.
- In the far left box, select the role search type:
- Role Name: Search by role name.
- Role Member: Search by user name or email.
- Target: search by target name.
- In the search box, enter the role name, user/email, or target, according to your above selection.
- (Optional) On the far right, click Export to export the list of roles to a CSV file.
How to add members to roles
Add members to a role to specify the phone users that have access to the role's privileges.
- Sign in to the Zoom web portal as the account owner or someone that has access to edit roles.
- In the navigation menu, click User Management then Roles.
- Click the Phone tab.
- Click Edit next to the role you want to assign members to.
- Click the Role Members tab.
- Click Add Members, then click one of these options:
Note: The users you assign must have a Zoom Phone license.
- Add new members: Manually add new members using one of the following.
- In the box, enter the name or email address of the member(s) to add to the role.
- Click Switch to bulk input, then enter the emails of your members separated by a comma or line breaks.
- Click Add.
- Copy Members from Existing Role: Copy specific or all members from an existing Zoom Phone role. Select the role and members using the drop-down menus, then click Save.
(Optional) Select Copy over members targets to also copy the individual targets set for each member you're copying over.
Note: You can also add members to roles using the User Management page or add advanced SAML mappings for phone admins.
How to add a default target to a role
Add a default target to determine the default extensions that role members can view/edit. Default targets apply to new and existing role members. For example, if you can a Billing call queue as the target for the Compliance Admin default role, all existing and new members will be able to access the associated Compliance Admin privileges for the Billing call queue.
- Sign in to the Zoom web portal as the account owner or someone that has access to edit roles.
- In the navigation menu, click User Management then Roles.
- Click the Phone tab.
- Click Edit next to the role you want to edit.
- Click the Default Targets tab.
- Click Add Targets.
- Select the extensions to add as a target.
- Click Add.
- Repeat steps 6 to 8 to add more default targets.
How to add a target to members
Add targets to specify the extensions that the role member can view/edit. You can add different targets for each member.
- Sign in to the Zoom web portal as the account owner or someone that has access to edit roles.
- In the navigation menu, click User Management then Roles.
- Click the Phone tab.
- Click Edit next to the role you want to edit.
- Click the Role Members tab.
- Click Manage Targets next to the name of role member you want add targets to.
- Click Add Targets.
- Select the extensions to add to the member.
- Click Add.
- Repeat steps 7 to 9 to add more targets to the member.
How to duplicate a default role and changing privileges
You can't customize the privileges in the default roles so you have to duplicate it then customize it.
- Sign in to the Zoom web portal as the account owner or someone that has access to edit roles.
- In the navigation menu, click User Management then Roles.
- Click the Phone tab.
- Click Duplicate next to a default role.
A copy of the role will be added to the bottom of the roles table. - Click Edit next to the copied role.
- In the Role Settings tab, change the privileges.
- Assign members and targets to the role.
Privileges
You can change phone privileges depending on the default role you duplicated:
Phone Super Admin
- Phone Number: View or edit phone number settings.
- User and Rooms: View or edit phone users, Zoom Rooms, and common area phones.
Note: This privilege includes setting up call delegation for phone users. - Default Audio Prompts: View or edit site-level or account-level audio settings.
- Voicemail/videomail Access: View and play voicemail/videomail.
- Play voicemail/videomail: Listen to voicemail and view voicemail transcriptions.
- Download: download voicemail/videomail.
- Delete: Delete voicemail/videomail.
- Voicemail/videomail notification by email: View or edit the voicemail/videomail notification by email policy.
- Recording Access: View and play recordings using the account-level call log.
Note: This privilege doesn't include the ability to grant access to call recordings.
- Play recordings: Listen to recordings and view recording transcriptions.
- Download: Download recordings using the account-level call log.
- Delete: Delete recordings using the account-level call log.
- Call Log: View or edit the account-level call log.
- SMS Log: View or edit SMS.
- View Messages: View the content of messages.
- Personal Emergency Address Access: View or edit users' personal emergency addresses.
- Data Residency: View or edit the storage location of phone content and data for account extensions such as call queues, auto receptionists, shared line groups, and common areas.
- All Other Features: View or edit all other features including the following.
Phone Site Admin
The Phone Site Admin has been improved to allow admins to exclusively manage designated sites, providing enhanced control over those specific sites. Admins assigned those specific targeted roles are restricted to do the following:
- Barge, monitor, and whisper across different sites.
- View or manage phone numbers assigned to other sites.
- Set call queue membership, monitoring, and call handling across different sites if the member is a call queue admin.
- Configure menu options and overflows across different sites if the member is an auto-receptionist admin.
This functionality will be rolled out gradually, providing customer access in phases, as outlined in the following table. It's important to note that the functionality will not be visible in your account if you are not part of the deployment phase.
Phase | Account | Deployment date |
Phase 1 | New Zoom Phone accounts | March 2024 |
Phase 2 | Zoom Phone accounts with less than 100 users | May 2024 |
Phase 3 | Zoom Phone accounts with 100 and 5000 users | June 2024 |
Phase 4 | All other Zoom Phone accounts | July 2024 |
After duplicating the Phone Site Admin role, you can set up the role to either:
- View: Click the checkbox in the View column to allow or disallow the visibility privileges of a feature.
- Edit: Click the checkbox in the Edit column to allow or disallow changes privileges to a feature.
- Entirely revoke access: Unselect both the View and Edit checkboxes to revoke access privileges to a feature.
Then select one of the following scopes as appropriate:
- Entire Account: To allow cross-site management of a feature.
- Targeted Sites: To restrict cross-site management of a feature.
You can apply or revoke scope privileges to the following features:
- Phone Number: View or edit phone number settings.
- Outbound Caller ID: View or edit outbound caller ID.
- Add & Remove Numbers: Edit Purchase and remove native and BYOC numbers.
- User and Rooms: View or edit phone users, Zoom Rooms, and common area phones, including their calling plans.
- Monitoring: View or Edit monitoring rules.
- Default Audio Prompts: View or edit site-level or account-level audio settings.
- Voicemail/videomail Access: View and play voicemail/videomail.
- Play voicemail/videomail: Listen to voicemail and view voicemail transcriptions at the targeted site level only.
- Download: download voicemail/videomail.
- Delete: Delete voicemail/videomail.
- Voicemail/videomail notification by email: View or edit the voicemail/videomail notification by email policy.
- Manage emails that receive forwarded voicemails/videmails: View or edit emails where voicemails are forwarded to.
- Recording Access: View and play recordings using the account-level call log.
Note: This privilege doesn't include the ability to grant access to call recordings.
- Play recordings: Listen to recordings and view recording transcriptions.
- Download: Download recordings using the account-level call log.
- Delete: Delete recordings using the account-level call log.
- Shared Modules: View or edit call queues, auto-receptionists, and shared line groups.
- Manage Membership: Assign the members of shared services from the site or account.
- Manage Call Handling: Set call handling and overflow options from the site or account.
- Call Log: View or edit the account-level call log.
- Personal Emergency Address Access: View or edit users' personal emergency addresses.
- Data Residency: View or edit the storage location of phone content and data for account extensions such as call queues, auto receptionists, shared line groups, and common areas.
- All Other Features: View or edit all other features including the following.
Call Queue Admin
Note: These privileges will only apply to the specified target call queues.
Queue Management
- Manage Basic Information: View or edit basic information including name, phone number, extension number, time zone, prompt language and site.
- Automatic Call Recording: View or edit the policy setting for automatic call recordings.
- Voicemail Transcription: View or edit voicemail transcription policy.
- Voicemail notification by email: View or edit the voicemail notification by email policy.
- Manage emails that receive forwarded voicemails: View or edit the emails that can receive forwarded voicemails.
- Voicemail Access: View and play voicemail.
- Play voicemail: Listen to voicemail and view voicemail transcriptions.
- Download: Download voicemail.
- Delete: Delete voicemail.
- Recording Access: View and play recordings.
- Play recordings: Listen to recordings and view recording transcriptions.
- Download: Download recordings.
- Delete: Delete recordings.
- Call Log: View or edit call log entries for the target call queues.
- SMS Log: View or edit SMS.
- View Messages: View the content of messages.
- Personal Emergency Address Access: View or edit users' personal emergency addresses.
- Data Residency: View or edit the storage location of phone content and data for account extensions such as call queues, auto receptionists, shared line groups, and common areas.
- All Other Features: View or edit all other features and settings not covered by the privileges above.
User Access Management
Auto Receptionist Admin
Note: These privileges will only apply to the specified target auto receptionists.
- Manage users access to voicemail: View or edit users that can access the voicemail inbox.
- Voicemail Access: View and play voicemail.
- Play voicemail: Listen to voicemail and view voicemail transcription.
- Download: Download voicemail.
- Delete: Delete voicemail.
- Voicemail notification by email: View or edit the voicemail notification by email policy.
- Voicemail transcriptions: View or edit the policy setting for voicemail transcriptions.
- Call Log: View or edit call logs.
- SMS Log: View or edit SMS.
- View Messages: View the content of messages.
- Data Residency: View or edit the storage location of phone content and data for account extensions such as call queues, auto receptionists, shared line groups, and common areas.
- All Other Features: View or edit all other features and settings not covered by the privileges above.
Recording Admin
Note: These privileges will only apply to the specified target sites, users, or call queues. These privileges do not include the ability to manage users' access to call recordings. You can find this privilege in the Call Queue Admin role.; or you can assign the Phone Super Admin or Phone Site Admin role to allow users to manage other users' access to call recordings.
Compliance Admin
Note: These privileges will only apply to the specified targets. These privileges do not include the ability to manage users' access to call recordings. You can find this privilege in the Call Queue Admin role.; or you can assign the Phone Super Admin or Phone Site Admin role to allow users to manage other users' access to call recordings.
- Voicemail Access: View and play voicemail.
- Play voicemail: Listen to voicemail and view voicemail transcriptions.
- Download: Download voicemail.
- Delete: Delete voicemail.
- Recording Access: View and play call recordings.
- Call log: View or edit call logs.
- SMS: View or edit SMS logs.
- View Messages: View the content of messages.