User Management (Zenitel Connect)

To administer user roles in Zenitel Connect, navigate to System > Users, or select the tile below:

Default user

In a factory default system there is one predefined user; this user has administrator rights. The default credentials are:

• Username: admin
• Password: admin

At the first login you will be forced to change the password of this default user.

The Users administration page

User roles

Zenitel Connect has 3 defined user roles:

• Administrator
• Zenitel Link User
• Read-only User

Session Management

To reduce the risk of unauthorized access:

• Users are prompted to change their password during first login.
• Users are automatically logged out after 30 minutes of inactivity.
• After five consecutive failed login attempts, the account is temporarily locked.
• The initial lockout period is 5 minutes. Continued failed login attempts result in progressively longer lockout periods.

Administrator role

The administrator role has read/write access to all tiles in the Zenitel Connect Homepage. An administrator can delete users, but not the 'own-user'; this is to prevent that by mistake the last logged-in administrator user deletes the own user, leaving Zenitel Connect without defined administrator. There is no limit to the number of users with this role, nor is there a limit to the number of active logins for the same user. The users with an administrator role cannot use the WAMP or REST API, a Zenitel Link user needs to be used for this.

Zenitel Link User role

Users with this role only have access to the API's which are available through Zenitel Link. There is a limit of one user with this role for Zenitel Connect Essential and no limit in Zenitel Connect Pro. The number of prrallel sessions per user is not limited.

Read-only Access role

Users with this role can view all configurations except which other users exists and their passwords.

The read-only user can also download logs.

Adding users

A user with the administrator role can define a new user; click to add a new user. A user is defined by entering the following fields:

• Username
• An optional Display Name
• Role
• Password

Changing a password

Administrators can change the password for any user. Users with other roles can only change their own password.

Security note: Use a high‑entropy password (long and unpredictable) to reduce the risk of brute‑force and credential‑guessing attacks.

• Click on in the column Actions
• In the new window enter the old and the new password
• Click Change password

It is not possible to retrieve the old password. If it is not known, the only possibility to change the password is to delete the user and define a new one.

In case that the password of the last remaining administrator is not known (in which case it will be impossible to log in), there is no other option then to factory default Zenitel Connect. It is therefore very important to keep a system backup file in a safe location, as this will allow a quick restore of the operational configuration of Zenitel Connect.

Device Password management

Zenitel devices are a special class of user within Zenitel Connect. Configuration of Zenitel devices is done from the Zenitel Connect web interface. This means that there is no need to log in into the webpages of Zenitel devices. Zenitel Connect updates the passwords of enrolled Zenitel devices with an auto-generated password. This prevents login and provides additional cybersecurity.