Skip to content

Add a Manager / Admin User

UnifiedBX has two distinct admin-user concepts that often get confused:

  1. Administrators (the ampusers module under System Admin → Administrators) — login accounts for the UnifiedBX GUI.
  2. UnifiedBX Manager Users (the manager module under System Admin → UnifiedBX Manager Users) — Asterisk Manager Interface (AMI) accounts used by integrations (CRM popups, dialer apps, custom dashboards). NOT for human GUI logins.

This page covers both.

Add a UnifiedBX GUI Administrator

For human admins who log into the dashboard.

Steps

  1. Go to System Admin → Administrators.
  2. Click + Add User.
  3. Fill in:
    • Username — e.g. jane.admin.
    • Password — strong, 12+ chars.
    • Admin Access — Full for unrestricted, or Limited to restrict by section.
    • Section Access (if Limited) — check only the modules they should see.
    • Allowed Extensions / Allowed DIDs — leave blank for all, or restrict for tenant-style isolation.
  4. Click Submit.
  5. Click Apply Config.

Verify

Log out and log back in as the new user. Confirm the section restrictions match what you set.

Add a UnifiedBX Manager User (AMI)

For programmatic AMI access — used by Sangoma Connect, dialer integrations, custom CRM popups.

Steps

  1. Go to System Admin → UnifiedBX Manager Users.
  2. Click + Add Manager.
  3. Fill in:
    • Manager name — e.g. crmpro_ami.
    • Manager secret — strong random string.
    • Deny / Permit — restrict by source IP. Permit: 10.0.0.0/8 is common for LAN-only.
    • Read / Write — privilege classes:
      • system — server commands
      • call — call origination/control
      • originate — only originating new calls
      • agent — queue agent operations
      • cdr — CDR access
      • dialplan — dialplan reads
      • user — user events
    • For a CRM "click-to-call": Read: call,user, Write: call,originate is typical.
    • DisplayConnects — Yes shows the manager in manager show users.
  4. Click Submit.
  5. Click Apply Config.

Verify

asterisk -rx "manager show users"

The new manager should appear. Test the credentials from another box:

nc <unifiedbx-ip> 5038
# Then send:
# Action: Login
# Username: crmpro_ami
# Secret: <secret>

You should get Response: Success.

Common Issues

  • Mixed up the two. Don't use a Manager User to log into the GUI — it won't work. Don't use an Administrator account in CRM AMI configs — also won't work.
  • AMI port 5038 unreachable. Check System Admin → Firewall — AMI must be allowed from the integration's source IP. By default it's blocked from external.
  • GUI login locked out. If you delete the only Full Admin, you're locked out. Recovery: SSH to the host and run fwconsole userman addUser.
  • Permissions too narrow. AMI integrations often need both call AND originate to dial out — originate alone won't let them control existing calls.