Help > Functions and Applications > Access authorisations
Access authorisations
To prevent important settings from being changed accidentally or by unauthorised persons, the phone can be protected from unauthorised access.
Login data 
The login data is required for the web interface; the phone itself is accessible to any user without a password.
By default, login data for an administrator is set up:
•User name: admin
•Password: admin
*Caution: Passwords that are unchanged from the factory settings are a security risk. Change the password without delay.
Additional login data can be set up with the roles Administrator (unrestricted access to the web interface) or User (restricted access to the web interface).
*Important: For a phone provisioned by the PBX, login data is set up for an administrator and a user. These cannot be changed over the phone.
•Administrator:
•User name: admin
•Password: Admin password of the PBX
•User:
•User name: Phone number of the user/subscriber from the PBX
•Password: Password of the user/subscriber from the PBX
Menu display 
To prevent incorrect operation, the menu display can be restricted.
The phone does not differentiate between different authorisation levels; the displays are restricted in the same way for all users. The following menus are always displayed, albeit in a reduced form:Phone info, Network
In the web interface, a distinction is made between the authorisation levels (roles) administrator and user based on the login data (user name, password). The restricted menu display does not apply to administrators. The menu display may be restricted for users. The following options are not possible:
•Reset the device to the factory settings.
•Add or delete users.
•Trace log recording if an error occurs.
•Restrict or remove restrictions on the menu display.
•Changing login details other than your own.
The following menus are always displayed, albeit in a reduced form:Dashboard, Device settings, Network, Login
Passwords 
Passwords are used for authentication. The user uses the agreed character string to log on to the web interface.
When you set a new password, comply with the conventions below. The password should:
•be different from the previous one used
•contain at least one number
•contain at least one capital letter
•contain at least one lower case letter
•contain at least one special character
•be at least 9 characters long
•be different from the user name
*Note: In general: If the password is complicated, it can be shorter. If a password is longer, it can use simpler character strings. Coloured bars provide direct visual feedback about the password strength when a password is entered.
Configuration
Web interface: 
•Login data
*Details about the settings are in Login
•Menu display
*Details about the settings are in Access
Provisioning: 
*Details about provisioning this function in the Auerswald DokuWiki