---
title: Users
summary: 'One person on the PBX. The user record carries identity, extension, phones, twinning, forwarding, DND, outbound caller IDs, phone buttons, and permissions. Nothing rings or routes without a user behind it.'
section: features
tags:
  - crud
  - telephony
  - identity
updated: '2026-08-12'
related_forms:
  - user_forwards
  - twinnings
  - dnds
  - phone_buttons
  - caller_identities
---

> A **user** is one person on your PBX. The record carries their identity, the extension they answer at, the phones that ring, the rules for forwarding their calls, the numbers they may present when dialling out, and the permissions they have inside the system.

## Overview

Users are the foundation of the telephony module - nothing rings, nothing routes, and no caller ID is presented without a user record. A user can be created manually, imported in bulk via CSV, or provisioned automatically from Microsoft Entra ID. Provisioned users wear a sync-source badge, and their lifecycle is managed by the upstream identity provider, not Cockpit.

## What it does

Most of telephony points at the user. They answer at an [extension](extensions.md), [call flows](call_flows.md) and [queues](queues.md) ring them, and they appear as members of [groups](groups.md), [pools](pools.md), and [pickup lines](pickup_lines.md). Tags and locations classify the user so pools, queues, and pickup lines can include or filter them.

## See also

- [Extensions](extensions.md) - the internal numbers users pick up.
- [Groups](groups.md) - the team structure users belong to.
- [Phone numbers](phone_numbers.md) - the caller identities users present on outbound calls.
- [SIP devices](sip_devices.md) - the phones that ring for users.
- [Templates](templates.md) - reusable defaults for creating users.
- [Phone buttons](phone_buttons.md) - the BLF keys and speed dials on users' devices.
- [Pools](pools.md) - dynamic member-list sources that filter by tag, location, or language.

```yaml fields
status:
  label: Enabled
  tab: 'Profile information'
  hint: 'Master on/off. Disabled users cannot log in or receive calls. Their extension still exists but rings nothing.'
first_name:
  label: 'First name'
  tab: 'Profile information'
  hint: 'The display name shown throughout the system, together with the last name.'
last_name:
  label: 'Last name'
  tab: 'Profile information'
  hint: 'Combined with first name to form the display name. May be auto-capitalized depending on PBX settings.'
email:
  label: 'Email address'
  tab: 'Profile information'
  hint: 'Login identity and where password-reset and voicemail emails are sent. Left empty at creation, the system generates a placeholder.'
language:
  label: 'Phone language'
  tab: 'Profile information'
  hint: 'Sets the phone-UI locale. Defaults to the PBX language if not set.'
  values:
    -
      value: en
      label: English
      text: 'English phone interface.'
    -
      value: de
      label: German
      text: 'German phone interface.'
    -
      value: fr
      label: French
      text: 'French phone interface.'
extensions:
  label: Extension
  tab: 'Profile information'
  hint: 'Internal number others dial to reach this user. Select an unassigned extension or create one inline. Without it the user exists but is unreachable by extension.'
voicemail_pin:
  label: 'Login / voicemail PIN'
  tab: 'Profile information'
  hint: 'PIN for voicemail access and phone-UI login authentication.'
sipDevices:
  label: 'Phones / SIP devices'
  tab: 'Profile information'
  hint: 'SIP phones assigned to this user, tied to their extension.'
pin_lock:
  label: 'Pin lock'
  tab: 'Profile information'
  hint: "Secondary PIN used to lock and unlock the user's SIP phone screen."
groups:
  label: Group
  tab: 'Profile information'
  hint: 'The single group this user belongs to. Drives inherited phone buttons, shared contacts, outgoing phone numbers, and call-flow defaults.'
tags:
  label: Tags
  tab: 'Profile information'
  hint: 'Free-form labels used by pools and pickup lines to filter members dynamically.'
locations:
  label: Locations
  tab: 'Profile information'
  hint: 'Physical locations for this user. Pools can filter by location to build dynamic member sets.'
languages:
  label: Languages
  tab: 'Profile information'
  hint: 'Languages this user speaks. Language-aware queues and IVR branches use this field to route callers to a matching agent.'
twinnings:
  label: Twinnings
  tab: 'Call preferences'
  hint: 'Rules that ring an external number alongside the desk phone. Each entry has a phone number, type, optional ring delay (0-20 s), and for mobile, a dial strategy.'
  text: 'Type is Mobile or Teams. For Mobile, dial strategy options are: GSM Only, VoIP Only, or VoIP and GSM Fallback. Each rule can be enabled or disabled independently.'
show_caller_id_for_twinning_call:
  label: 'Show my company default number on twinning calls'
  tab: 'Call preferences'
  hint: 'Show my company default number when twinning (transferring) an incoming call to my mobile GSM number.'
userForwards:
  label: Forwards
  tab: 'Call preferences'
  hint: 'Rules that redirect inbound calls based on an event trigger.'
  text: 'Each rule has a type (Internal or External), an event (Always, Busy, After 10 seconds, On DND, Timeout, On logout), and a target (fixed number, extension, user, voicemail, or hang up). External rules also have a caller identity picker.'
dnds:
  label: DNDs
  tab: 'Call preferences'
  hint: 'Rules that silence incoming calls. Overrides ringing entirely. Forwarding rules with an On DND event still fire.'
  text: 'Each rule applies to Internal or External calls and can be restricted to a specific caller identity. Rules can be enabled or disabled independently.'
voicemail_type:
  label: 'Voicemail type'
  tab: 'Call preferences'
  hint: 'Which calls voicemail catches after all other rules are exhausted.'
  values:
    -
      value: disabled
      label: Disabled
      text: 'No voicemail. Unanswered calls follow the call flow fallback.'
    -
      value: internal
      label: Internal
      text: 'Catches unanswered internal calls only.'
    -
      value: external
      label: External
      text: 'Catches unanswered external calls only.'
    -
      value: enabled
      label: Enabled
      text: 'Catches all unanswered calls.'
voicemail_destination:
  label: 'Voicemail destination'
  tab: 'Call preferences'
  hint: 'Where voicemail recordings are delivered.'
  values:
    -
      value: email_only
      label: 'Email only'
      text: 'Recording sent as an email attachment only.'
    -
      value: email_and_phone
      label: 'Email and phone'
      text: "Recording delivered by email and also deposited in the phone's voicemail folder."
callerIdentityInternalExtension:
  label: 'Extension shown to users outside of your group'
  tab: 'Outgoing phone numbers'
  hint: "Overrides the extension displayed to internal callers outside this user's group. Leave unset to show the actual extension."
callerIdentityExternalExtension:
  label: 'Extension shown to users inside your company'
  tab: 'Outgoing phone numbers'
  hint: 'Overrides the extension displayed to all internal callers. Leave unset to show the actual extension.'
defaultCallerIdentity:
  label: 'Default caller identity'
  tab: 'Outgoing phone numbers'
  hint: 'The phone number presented by default on outbound external calls. Chosen from the merged user + group + PBX list.'
callerIdentities:
  label: 'Phone numbers'
  tab: 'Outgoing phone numbers'
  hint: 'Phone numbers assigned directly to this user for outbound calls. Combined with group-level and PBX-level numbers.'
  text: 'Each entry has a phone number, optional suffix, and optional label. Drag to reorder, as position affects the default picker order.'
phoneButtons:
  label: 'Phone buttons'
  tab: 'Phone buttons'
  hint: 'Phone buttons configured at the user level. Combined with inherited buttons from PBX defaults and group, with user-level buttons overriding at the same slot.'
allow_telephony:
  label: 'Allow telephony'
  tab: Permissions
  hint: 'Master switch. When off, the user cannot make or receive calls.'
allow_call_forwarding:
  label: 'Allow call forwarding'
  tab: Permissions
  hint: 'Lets the user configure their own call forwarding rules from the Voxbi app.'
allow_dnd:
  label: 'Allow DND (Do not disturb)'
  tab: Permissions
  hint: 'Lets the user activate Do not disturb from the Voxbi app.'
allow_change_twinning_dest:
  label: 'Allow change twinning destination'
  tab: Permissions
  hint: 'Lets the user change their own twinning destination numbers from the Voxbi app.'
allow_sms:
  label: 'Allow SMS'
  tab: Permissions
  hint: 'Lets the user send and receive SMS messages through the system.'
vip:
  label: VIP
  tab: Permissions
  hint: 'VIP contacts can still reach this user even when DND is active.'
send_missed_call_via_email:
  label: 'Send missed call via email'
  tab: Permissions
  hint: 'Send an email notification to this user when they miss a call.'
limit_email_missed_call_to_direct:
  label: 'Limit missed call emails to direct calls only'
  tab: Permissions
  hint: 'When enabled, missed call email notifications are only sent for calls that rang directly on this extension (not via call flow or twinning).'
allow_national_calls:
  label: 'Allow national calls'
  tab: Permissions
  hint: 'Permits outbound national calls.'
allow_eu_calls:
  label: 'Allow EU calls'
  tab: Permissions
  hint: 'Permits outbound calls to EU countries.'
allow_international_calls:
  label: 'Allow world calls'
  tab: Permissions
  hint: 'Permits outbound international (world) calls.'
allow_premium_numbers:
  label: 'Allow premium calls'
  tab: Permissions
  hint: 'Permits outbound calls to premium-rate numbers.'
allow_anonymous_calls:
  label: 'Allow anonymous calls'
  tab: Permissions
  hint: 'Lets the user hide their caller identity on outbound calls.'
allow_default_pbxes_outgoing_phone_numbers:
  label: 'Allow default outgoing phone numbers'
  tab: Permissions
  hint: "Adds the PBX-level default phone numbers to this user's outgoing number pool."
show_in_address_book:
  label: 'Show in address book'
  tab: Permissions
  hint: 'Makes this user visible in the internal address book for other users.'
allow_status_changer:
  label: 'Allow status changer'
  tab: Permissions
  hint: 'Lets the user change their own presence status from the Voxbi app.'
allow_right_to_disconnect:
  label: 'Allow right to disconnect'
  tab: Permissions
  hint: 'Lets the user activate the right-to-disconnect feature, which can suppress incoming calls outside configured working hours.'
extension_roaming:
  label: 'Extension roaming'
  tab: Permissions
  hint: 'Lets the user log in to any SIP device and use their own extension, rather than being tied to a specific phone.'
allow_manage_voicemail_parameters:
  label: 'Allow voicemail changes'
  tab: Permissions
  hint: 'Lets the user change their own voicemail settings (greeting, PIN) from the Voxbi app.'
concurrent_calls:
  label: 'Concurrent calls'
  tab: Permissions
  hint: 'Allows the user to handle multiple simultaneous calls. When off, a second incoming call is treated as busy.'
record_your_calls:
  label: 'Record your external calls'
  tab: Permissions
  hint: 'Automatically records all external calls for this user. Requires the PBX-level "Allow users to stop/start recording" setting to be on.'
access_all_call_recordings:
  label: 'Access own call recordings and transcriptions'
  tab: Permissions
  hint: 'Lets the user access and listen to their own call recordings from the Voxbi app.'
record_your_internal_calls:
  label: 'Record your internal calls'
  tab: Permissions
  hint: 'Automatically records all internal calls for this user. Requires the PBX-level "Allow users to stop/start recording" setting to be on.'
allow_in_call_recording:
  label: 'Allow in-call recording'
  tab: Permissions
  hint: 'Lets the user manually start and stop recording during an active call. Requires the PBX-level "Allow users to stop/start recording" setting to be on.'
callRecordingAllowedGroups:
  label: 'Access group call recordings and transcriptions'
  tab: Permissions
  hint: 'Groups whose call recordings this user can access. Enables cross-group recording visibility.'
allow_manage_global_contacts:
  label: 'Allow managing all contacts'
  tab: Permissions
  hint: 'Lets the user create, edit, and delete global contacts visible to everyone on the PBX.'
allowManageGroupContacts:
  label: 'Allow managing group contacts'
  tab: Permissions
  hint: 'Groups whose shared contacts this user can create, edit, and delete.'
allowAccessToGroupContacts:
  label: 'Allow visibility to group contacts'
  tab: Permissions
  hint: 'Groups whose shared contacts this user can view and search, without the ability to modify them.'
allow_grafana_access:
  label: 'Access to call analytics'
  tab: Permissions
  hint: 'Gives the user access to the call analytics (Grafana) dashboard. Also shows a "Login to Grafana" button on the user list row.'
roles:
  label: Roles
  tab: Permissions
  hint: 'Application roles that determine which parts of the admin panel this user can access.'
password:
  label: Password
  tab: 'Login credentials'
  hint: 'Login password. Leave empty when editing to keep the current password unchanged.'
sip_webrtc_password:
  label: 'SIP/WebRTC password'
  tab: 'Login credentials'
  hint: 'VoIP authentication credential, shown as a SHA256 hash. Use "show sensitive information" to reveal the actual value - this action is audit-logged.'
voip_username:
  label: 'SIP/WebRTC username'
  tab: 'Login credentials'
  hint: "SIP/VoIP username for the user's softphone or WebRTC client."
sip_webrtc_proxy:
  label: 'SIP/WebRTC proxy'
  tab: 'Login credentials'
  hint: 'SIP/WebRTC proxy address, auto-set to {instance_name}.voxbi.cloud. Read-only.'
integration_mappings:
  label: 'Integration mappings'
  tab: Integrations
  hint: 'External-system identifiers linked to this user. One row per active integration (for example, a DSK time-attendance ID). Use the form above the table to add a mapping, and the X button on a row to remove one.'
```