Smarts VoIP: Why does "Standard CCM Admin Users" need a privileged role and can we disable this?

Products

• VMware Smart Assurance

Issue/Introduction

Symptoms:


What happens if I remove the priviliges?

Why does "Standard CCM Admin Users" need a piovilged role and can we disable this? Is it possible to do a full discovery without this role or it is required for call manager discovery?

Per the configuration guide for VoIP you need an account on the callmanager with the below roles:
    Standard AXL API Access
    Standard Admin Rep Tool Admin
    Standard CCM Admin Users
    Standard CCMADMIN Readme
    Standard CUReporting
    Standard EM Authentication Proxy Rights
    Standard RealtimeAndTraceCollection
    Standard SERVICEABLILITY Administration

Environment

VMware Smart Assurance - SMARTS

Resolution

The access level  Standard CCM Admin Users  is read-only access and minimum required privilege to log into the Call manger admin data. 

Without which smarts could not read any call manager admin data for discovery and monitoring.  Also providing this privilege smarts could not configure/change/modify call manager configuration. 

Please see below link for further reference.

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/9_0_1/ccmsys/CUCM_BK_CD2F83FA_00_cucm-system-guide-90/CUCM_BK_CD2F83FA_00_system-guide_chapter_0100.pdf

Discovery will fail if you modify this account