Limitations and Known Issues

System zone

The System zone is the default zone. All administrator member of this System zone will gain access to every zone administration.

User & device

Nothing prevents a user from zone ‘A’ to login on turret from zone ‘B’ although it may become an administrator challenge for large DB.

TPO in a zone

If a TPO is defined in a custom zone, corresponding TPO Cluster have to be moved/created in the same zone.

Multiple TSS On the same host

If multiple TSS servers are installed on the same machine and control the same FTP site, only one of them can have the hand on zone control in order to avoid conflicts. In this case, the older version must have the following TSS setting:

Location: TSS Settings
General	Disable Zone Reconstruction truefalse Key: zone.management.disable Description: Disable reconstruction of zone file (ipt.zones.cfg in TFTP folder). This is necessary when you have several instance of TSS/Console installed. Set this on all TSS/Console instance that are not primary instance. Constraint: true|false

Zone Administrator limitations

Account and Device Management  Menu

All menu items are available although lists will contain only Users/Shared Profiles linked to zones accessible to the administrator

Advanced Telephony

All menu items are available although lists will contain only intercom/presence group linked to zones accessible to the administrator

Security

Only the Zone item is accessible, application and password policy are only accessible by System administrators. A zone administrator cannot add /delete / edit zones however it has access to zones linked to its user. This way the administrator has defined rights and with list limited to its controlled zones.

System

The following menu items are not accessible:

-Monitoring

-Settings/emailconfiguration

-Settings/Globalturret configuration

-Settings/TSS configuration

-License

-Firmware management

-Alternate Label

Device or user sessions will be limited to zone controlled by the administrator.

Boot Settings (Turrets & TPOs) are accessible but limited to device/zone controlled by the administrator

Job policy will be limited to zone controlled by the administrator although all job policy will be visible for consultative purpose.

Phonebook is limited to shortcuts contained inside profile linked to administrator zones.

Console

The console menu is available. Administrator list will be limited to administrators present in zones controlled by currently logged in user. This is a complete match, meaning that if admin A control zone W while admin B control zone W and zone Z, admin A will not see admin B but admin B will see admin A.

The administrator can create admin group but uniquely inside its controlled zone area.