/* BEGIN BLOG-CLOSE-CHAT */ /* END BLOG-CLOSE-CHAT */

ICTPBX Super Admin Guide

Super Admin

Role: Super Admin | Access Level: Level 1 — Full System Access


Introduction

The Super Administrator has unrestricted access to the entire ICTPBX installation. You are responsible for provisioning tenants, managing the platform’s PBX infrastructure, configuring billing packages, maintaining trunks and DID numbers, applying white-label branding, and monitoring system-wide activity. This guide covers every feature available to your role, with step-by-step instructions and screenshots.

Portal URL: Your ICTPBX portal URL (provided by your service provider)


1. Logging In

Navigate to your ICTPBX portal URL in any modern browser (Chrome, Firefox, Edge).

Login Page

  1. Enter your administrator Email Address.
  2. Enter your Password.
  3. Click SIGN IN.

Login Credentials Entered

Security Note: After several consecutive failed login attempts, accounts are temporarily locked per the Password Policy. If you are locked out, access the server directly to reset.


2. Dashboard — System Statistics

After login you land on the System Statistics dashboard — a real-time overview of the entire platform.

Admin Dashboard

PBX Statistics cards:

  • Extensions, Devices, Ring Groups, Call Queues, IVR Menus, Voicemails, Conferences, Gateways

Fax Statistics cards:

  • Outbound Fax count, Inbound Fax count, DIDs, Users, Tenants, Daily Pages Sent, Monthly Pages Sent

Your current credit balance is shown in the top-right header. It refreshes every 10 seconds.

Admin Dashboard Full


3. Multi-Tenant Management

Tenants are the business organizations you host on the platform. Each tenant has its own isolated PBX environment, users, billing balance, and (optionally) its own branding.

Navigate to Administration → Tenants.

Tenant List

3.1 Creating a New Tenant

  1. Click New.
  2. Fill in the tenant details:

New Tenant Form

Field Description
Company Name The business name
Email Primary contact email
Phone Contact phone number
Address Physical address
Daily Limit Max fax pages per day (0 = unlimited)
Monthly Limit Max fax pages per month
Quota Storage quota
  1. Click Save. The tenant record is created in the database and a ICTCore domain is provisioned automatically.

3.2 Editing a Tenant

  1. Click the Edit button on the tenant row.
  2. Modify the required fields.

Tenant Edit Form

  1. Click Save.

3.3 After Creating a Tenant

After creating a tenant you must:

  • Create a Tenant Admin user (see Section 4) — the tenant cannot log in until a user exists.
  • Assign a Subscription/Package (see Section 20) to define resource limits.
  • Optionally configure Branding (see Section 23) for white-label deployment.

4. User Management

Users are the login accounts for all roles — Admin, Tenant Admin, Agent, and End User. All users are managed from Administration → Users.

User List

4.1 Role Hierarchy

ICTPBX enforces four roles:

Role role_id Description
Super Admin 2 Full platform access — only assignable by system setup
Tenant Admin 3 Manages one tenant’s resources and users
Agent Operational access: softphone, queues, CDR
End User 4 Personal account: SIP credentials, fax, Follow Me, DND

Role Hierarchy User List

4.2 Creating a New User

  1. Click New.

New User Form

  1. Fill in the required fields:
Field Description
First Name User’s first name
Last Name User’s last name
Username / Email Login email address
Password Must meet password policy (12+ chars, uppercase, number, special character)
Confirm Password Repeat the password
Tenant Select the tenant this user belongs to
Role Select Tenant Admin (3) or End User (4)
Permissions Comma-separated permission tokens controlling menu access

New User Form Filled

  1. Click Save.

4.3 Tenant Admin Permissions

When creating a Tenant Admin (role=3), you control which PBX modules they can access via the Permissions field. Example tokens:

“` extensions, devices, ring_groups, call_queues, ivr_menus, voicemails, conferences, inbound_routes, follow_me, call_block, music_on_hold, gateways, did, fax, realtime, cdr_reports, billing “`

Only tokens you include will appear in the tenant admin’s sidebar menu.


5. Extensions Management

Extensions are SIP accounts that register to FreeSWITCH. Each extension corresponds to a phone line within a tenant’s domain.

Navigate to PBX → Extensions.

Extensions List

5.1 Creating a New Extension

  1. Click New.

New Extension Form

Field Description
Extension 4–6 digit number (e.g. 1001) — must be unique in domain
Password SIP registration password
Effective Caller ID Name Display name for outbound calls
Effective Caller ID Number CLI for outbound calls
Voicemail PIN PIN to access voicemail (4+ digits)
Extension Type Voice or Fax
Call Recording Always / On-Demand / Never
  1. Click Save. The extension is written to ICTCore PostgreSQL and synced to FreeSWITCH’s user directory immediately via reloadxml.

Extension Edit Form

Conflict prevention: ICTPBX checks for duplicate extension numbers across all PBX resource types. If a conflict is detected, a 409 error is shown and the save is blocked.


6. Device Management

Devices represent physical SIP endpoints — desk phones, ATA adapters, or softphones configured outside the portal.

Navigate to PBX → Devices.

Devices List

6.1 Adding a Device

  1. Click New.

New Device Form

Field Description
MAC Address Device hardware address (for auto-provisioning)
Label Friendly name
Assigned Extension Link device to an existing extension
Template Provisioning template for the device model
  1. Click Save.

Device Edit Form


6A. Device Profiles

Device profiles are reusable provisioning templates. Instead of configuring every desk phone by hand, you define a profile once, covering the shared settings for a phone brand or model, then apply it to any device you add. This keeps a fleet of handsets consistent and makes new rollouts much faster.

Navigate to PBX › Device Profiles.

Device Profiles list

6A.1 Adding a Profile

  1. Click Add Profile.

Add Device Profile form

Field Description
Profile Name Required. A label for the template (e.g. “Cisco Desk Phones”)
Description Optional notes describing what the profile is for
Enabled Toggle the profile active or inactive
  1. Click Save. The profile appears in the list and can be selected when you provision a device.

7. Ring Groups

Ring groups ring multiple extensions simultaneously or sequentially when a single number is dialed.

Navigate to PBX → Ring Groups.

Ring Groups List

7.1 Creating a Ring Group

  1. Click New.

Ring Group New Form

Field Description
Ring Group Name Descriptive label (e.g. “Support Team”)
Extension Dial-in number for this ring group
Ring Strategy Simultaneous / Sequential / Round-Robin
Ring Timeout Seconds before moving to the timeout destination
Timeout Destination Where to send the call if unanswered
Members List of extensions to include
  1. Add member extensions in the Members section.
  2. Click Save.

Ring Group Edit


8. Call Queues (ACD)

Call queues provide automatic call distribution — callers wait in a virtual queue until an available agent answers.

Navigate to PBX → Call Queues.

Call Queues List

8.1 Creating a Call Queue

  1. Click New.

Call Queue New Form

Field Description
Queue Name Descriptive label (e.g. “Sales Queue”)
Extension Dial-in number for this queue
Ring Strategy Round-Robin / Longest-Idle / Top-Down
Max Wait Time Maximum seconds a caller waits before timeout
Music on Hold Audio class played to waiting callers
Timeout Destination Where to send the call if max wait exceeded
  1. Click Save, then open the queue and go to the Agents tab to add agent tiers.

Queue Settings Form

8.2 Adding Agents

In the Agents/Tiers tab:

  1. Select an extension from the agent dropdown.
  2. Set Tier Level and Tier Position (priority order).
  3. Click Add Agent.
  4. Repeat for all agents.

Queue Agents Tab


9. IVR Menus (Auto-Attendant)

IVR menus let callers navigate by pressing digits — routing themselves to the right department without speaking to a person.

Navigate to PBX → IVR Menus.

IVR List

9.1 Creating an IVR Menu

  1. Click New.

IVR New Form

Field Description
IVR Menu Name Label (e.g. “Main Menu”)
Extension Dial-in number
Greeting Audio file played to callers
Invalid Sound Played when an unrecognised digit is pressed
Timeout Seconds before timeout if no digit pressed
Timeout Destination Where to route on timeout
Max Failures How many invalid inputs before disconnecting
  1. In the Options section, add digit mappings:

IVR Edit Form

Digit Destination Type Destination
1 Extension 1001
2 Ring Group Support Team (7000)
0 Voicemail Reception voicemail
  1. Click Save.

IVR Edit Full Page


10. Voicemail Boxes

Voicemail boxes capture calls when extensions are unavailable and email the recording to the user.

Navigate to PBX → Voicemails.

Voicemail List

10.1 Creating a Voicemail Box

  1. Click New.

Voicemail New Form

Field Description
Extension Extension this voicemail belongs to
Password / PIN 4+ digit PIN to retrieve messages
Email Address Where to email new voicemail notifications
Attach File Enable to attach the audio file to the email
Enabled Toggle voicemail on/off for this extension
  1. Click Save.

Voicemail Edit Form


11. Conference Rooms

Conference rooms allow multiple participants to join a shared audio bridge by dialing an extension.

Navigate to PBX → Conferences.

Conference List

11.1 Creating a Conference Room

  1. Click New.

Conference New Form

Field Description
Conference Name Descriptive label
Extension Dial-in number
PIN Optional access PIN
Max Members Maximum simultaneous participants
Record Enable to record the conference
  1. Click Save.

12. Inbound Routes (DID Routing)

Inbound routes map incoming DID phone numbers to PBX destinations — determining what happens when a call arrives on a specific number.

Navigate to PBX → Inbound Routes.

Inbound Routes List

12.1 Creating an Inbound Route

  1. Click New.

Inbound Route New Form

Field Description
DID Number The incoming phone number (e.g. 2125550100)
Target Type Extension / Ring Group / IVR Menu / Call Queue / Voicemail / Conference
Target Select the specific destination
Description Optional notes
  1. Click Save. The route is written to the ICTCore dialplan and takes effect immediately.

13. Call Flows & Time Conditions

Call flows route calls differently based on time of day — business hours vs. after hours.

13.1 Time Conditions

Navigate to PBX → Time Conditions.

Time Conditions List

Create a Time Condition defining your business hours schedule (e.g. Monday–Friday 09:00–17:00).

13.2 Call Flows

Navigate to PBX → Call Flows.

Call Flows List

  1. Click New.

Call Flows New Form

Field Description
Name Label (e.g. “Main Number Hours”)
Extension The number that triggers this flow
Time Condition Link to the schedule you defined above
Open Destination Where to route during business hours
Closed Destination Where to route outside business hours
  1. Click Save. Link your DID’s inbound route to this call flow extension.

14. Follow Me

Navigate to PBX → Follow Me.

Follow Me List

Follow Me adds external forwarding destinations to any extension. When a call arrives on the extension, it simultaneously (or sequentially) rings the configured external numbers.

  1. Click New and select the extension to configure.

Follow Me New Form

  1. Enable Follow Me and add destination numbers with delay and timeout values.
  2. Click Save.

15. Call Block

Navigate to PBX → Call Block.

Call Block List

Add numbers or patterns to block specific callers system-wide. Blocked calls are rejected at the FreeSWITCH dialplan before reaching any extension.

  1. Click New.
  2. Enter the number or pattern to block.
  3. Set the block action (reject, busy, ignore).
  4. Click Save.

16. Music on Hold

Navigate to PBX → Music on Hold.

Music on Hold List

16.1 Uploading Audio

  1. Click New.

Music on Hold Upload Form

  1. Enter a Name for the MOH class.
  2. Upload an audio file (MP3 or WAV recommended).
  3. Click Save.

Assign the MOH class to call queues or ring groups from their respective edit forms.


17. Feature Codes

Navigate to PBX → Feature Codes for a read-only reference of all FreeSWITCH star codes available in the system.

Feature Codes

Share this list with users so they can use features from their desk phones or softphone dialpad.


18. SIP Trunks / Gateways

SIP trunks connect ICTPBX to the PSTN via a SIP provider, enabling inbound and outbound calls to regular phone numbers.

Navigate to Routing → Gateways.

Gateways List

18.1 Adding a SIP Trunk

  1. Click New.

Gateway New Form

Field Description
Gateway Name Label for this trunk
Username SIP trunk username from your provider
Password SIP trunk password
Proxy Provider SIP server address
Register Enable SIP registration with the provider
Codec Preferred codecs (PCMA, PCMU, G729, Opus)
  1. Click Save. The gateway is registered with FreeSWITCH immediately.

You can also manage providers (which map to gateways) via Routing → Providers:

Providers List


18A. Outbound Routes

Outbound routes decide which trunk carries a call or fax to a given destination. When a user dials out, ICTPBX matches the number against your routes and hands the traffic to the provider you mapped for that region. This lets you send domestic traffic over one carrier and international over another, or keep voice and fax on separate trunks.

Navigate to Routing › Routes.

Outbound Routes list

18A.1 Adding a Route

  1. Click Add Route.

Add Route form with destination picker

Field Description
Service Voice or Fax. Pick which kind of traffic this route handles
Provider The trunk that will carry the matched traffic
Region The world region for the destination
Country The country within that region
Destinations Move number prefixes from the Available list into Selected to include them in this route
  1. Click Submit.
You need at least one Provider / Trunk configured before you can add a route. Fax routes require a fax-enabled trunk (a provider with T.38 / G.711 pass-through turned on).

19. DID Number Management

DIDs are phone numbers assigned to the system and routed to tenant extensions.

Navigate to Routing → DIDs.

DID Numbers List

19.1 Adding a DID

  1. Click New.

DID New Form

Field Description
DID Number The phone number (E.164 format, e.g. 12125550100)
Tenant Assign to a tenant
Description Optional notes
  1. Click Save.
  2. Then create an Inbound Route (Section 12) to map this DID to a destination.

20. Fax Management

20.1 Sending a Fax

Navigate to Fax → Send Fax.

Send Fax Form

  1. Enter the recipient fax number.
  2. Select a cover page template (optional).
  3. Upload the PDF document.
  4. Click Send Fax.

20.2 Inbound Fax Log

Navigate to Fax → Inbound Fax to see all received faxes across all tenants.

Inbound Fax Admin View

20.3 Fax Settings

Navigate to Fax → Fax Settings to configure global fax parameters — outbound caller ID, fax header, ECM mode, and retry count.

Fax Settings

20.4 Cover Pages

Navigate to Fax → Cover Pages to manage reusable cover page templates.

Cover Pages


20A. Bulk Fax Campaigns

Bulk fax lets you send one document to a whole list of recipients in a single run. You pick a fax document, point it at a contact group, and the platform dials each number for you, retrying failures and tracking delivery as it goes.

Navigate to Fax › Bulk Fax.

Bulk fax campaigns list

The campaign list shows the Program Name, current Status, and live counters for Total, Done, Successful, and Failed recipients. The action buttons on each row let you view the detail report, pause, resume, or stop a running campaign.

20A.1 Creating a Campaign

  1. Click Create Fax Campaign.

Create fax campaign form

Field Description
Document Choose an existing fax document, or click Upload to add a new one
Group The contact group whose members will receive the fax
Caller ID The number shown to recipients
Retry How many times to retry a number that fails
Calls per minute The sending rate, so you can throttle large runs
  1. Click Submit. The campaign starts and its progress updates on the list.
A fax-enabled trunk (a provider with T.38 / G.711 pass-through) must exist before a campaign can run. If you see a “No fax-enabled trunk found” notice, add one under Routing › Provider / Trunks first.

20B. Fax Contacts, Groups & DNC

Contacts are the address book behind your faxes. Build groups of recipients, import them in bulk from a CSV, and keep a do-not-contact list so you never fax a number that has opted out.

20B.1 Contacts

Navigate to Fax › Contacts › Contacts.

Fax contacts list

The contact list shows every saved recipient with their name, phone, and email. Use Add Contact to create one, or the filter box to find an existing entry. Each row has edit and delete actions.

20B.2 Contact Groups

Navigate to Fax › Contacts › Contact Groups.

Contact groups list

Groups bundle contacts together so a bulk fax can target them in one shot. The list shows each group name and its contact count. Click Add Group to create one. To load many recipients at once, download the Sample CSV file, fill it in, and import it.

20B.3 Contact DNC

Navigate to Fax › Contacts › Contact DNC.

Contact Do Not Contact list

The Do Not Contact list holds numbers that must be excluded from fax campaigns. Add entries with Add, use Import to upload a suppression list, and Export to download the current one. Numbers on this list are skipped when a campaign runs.


21. WebRTC Softphone

The softphone is available from any page via the phone icon in the header.

Softphone with Credentials

  1. Click the icon in the top-right header.
  2. Go to Settings tab — enter Extension, Password, Domain, WebSocket URL.
  3. Click Save — the green dot confirms registration.
  4. Use the Dialer tab to make calls.

Call controls: Hold · Unhold · Transfer · Mute · DTMF · Hangup


22. Realtime Channel Monitor

Navigate to Realtime from the sidebar for a live view of all active calls.

Realtime Monitor

Each active channel shows: Caller ID, destination, duration, codec, and UUID.

Live controls:

  • Hangup — Terminate a specific call.
  • Hold — Place a call on hold.
  • Transfer — Move a call to another destination.

Realtime Full Page


23. Billing Management

23.1 Rate Plans

Navigate to Billing → Rates to define per-minute and per-page pricing.

Rate Plans

Create rates for voice (per-minute) and fax (per-page) that are applied when tenants exceed their package’s included free units.

23.2 Service Packages

Navigate to Billing → Packages to define tenant resource plans.

Packages List

  1. Click New.

New Package Form

Resource Description
Extensions Max SIP extensions
Devices Max registered devices
Ring Groups Max ring groups
Call Queues Max call queues
Voicemails Max voicemail boxes
IVR Menus Max IVR menus
Conference Rooms Max conference bridges
Music on Hold Max MOH classes
Voice Minutes/mo Included free minutes (overage billed per rate)
Fax Pages/mo Included free pages
Conference Mins/mo Included conference minutes

Package Resource Limits Full

  1. Click Save.

23.3 Subscriptions

Navigate to Billing → Subscriptions to assign packages to tenants.

Subscriptions List

  1. Find the tenant row.
  2. Select a package from the dropdown.
  3. Click Assign. The old subscription is deactivated and resource quota rows are seeded from the new package instantly.

23.4 Payments (Credit Top-Up)

Navigate to Billing → Payments.

Payments List

  1. Click New.

Add Payment Form

Field Description
Tenant Select the tenant to credit
Amount Credit amount (e.g. 50.00)
Type online_payment / bank_transfer / cash / adjustment
Date Payment date
Description Reference notes
  1. Click Submit. The tenant’s credit balance is updated immediately.

23.5 Billing Quota Dashboard

Navigate to Billing → Billing Quota to see system-wide quota usage.

Billing Quota Admin
Billing Quota Full


24. Reports & CDR

24.1 ICTCore CDR

Navigate to Reports → CDR for call and fax transmission records.

CDR List

Filter by date range, tenant, user, and service type. Export data for billing reconciliation.

24.2 PBX CDR (FreeSWITCH)

Navigate to Reports → PBX CDR for FreeSWITCH-level records including codec, hangup cause, and recording links.

PBX CDR

24.3 Statistics Report

Navigate to Reports → Statistics for graphical call and fax volume summaries.

Statistics Report

24.4 Activity Log

Navigate to Reports → Activities for a full audit trail of user actions, configuration changes, and billing events.

Activity Log


25. White-Label Branding

Apply per-tenant branding so each tenant’s portal feels like a proprietary product.

Navigate to Administration → Branding.

Branding List

25.1 Creating a Branding Profile

  1. Click New.

Branding New Form

Field Description
Domain Hostname this branding applies to
Title Browser tab / application title
Logo Upload company logo image
Login Subtitle Text shown below the logo on the login page
Login Background URL Full-page background image URL for the login page
Support Email Help email shown to users
Favicon URL Browser favicon URL
Footer HTML HTML content shown in the page footer
Theme Lock Force a specific UI theme (prevents user switching)
Default Mark as the default branding for unmatched domains
  1. Click Save.

Branding Edit Form Full


26. Administration

26.1 Announcements

Navigate to Administration → Announcements to publish system-wide notices to users.

Announcements List

  1. Click New.
  2. Enter the announcement title and body text.
  3. Select the target audience (all users, specific tenant, specific role).
  4. Click Save. The announcement appears on the dashboard for targeted users.

26.2 Password Policy

Navigate to Administration → Password Policy to configure platform-wide password rules.

Password Policy

Setting Description
Minimum Length Minimum character count (recommended: 12)
Require Uppercase At least one capital letter
Require Lowercase At least one lowercase letter
Require Number At least one digit
Require Special Character At least one special character (!@#$%^&*)
Max Password Age (days) Days before password expiry (0 = never)
Max Failed Attempts Failed logins before account lockout
Lockout Duration (min) Minutes account remains locked

Click Save to apply. The policy is enforced on all subsequent password changes and new user creation.

26.3 Permission Filtering

The sidebar menu for each role is filtered by permission tokens stored in the user’s account. To modify a tenant admin’s access:

  1. Go to Administration → Users.
  2. Edit the tenant admin user.
  3. Modify the Permissions field — add or remove permission tokens.
  4. Save. Changes take effect on the user’s next login.

Permission Filtering


27. Tips & Troubleshooting

Extensions not registering after creation: After saving a new extension the system runs reloadxml automatically. If registration still fails, check that the SIP password matches what the client is using, and that the force-register-domain matches your public hostname.

Calls not routing to the right destination: Verify the Inbound Route is correctly mapped — check the DID number format (no spaces, no dashes). Also confirm the target (ring group, IVR, extension) exists and is enabled.

Fax transmission failing: Check gateway registration status. Ensure the outbound route includes fax-capable codecs (G.711). Verify the recipient number is in the correct format.

Tenant admin cannot see a menu item: Check that the required permission token is present in the tenant admin’s user Permissions field. The token must exactly match the feature key (e.g. extensions, ring_groups, billing).

Credit balance not updating: The header polls every 10 seconds. If it remains stale, the CDR ETL job may not be running — trigger it manually from Reports → PBX CDR.

Billing quota not enforced: Confirm the tenant has an active subscription with a package assigned. Without a subscription, quotas are not initialized and enforcement does not apply.


ICTPBX Service Provider Edition — Super Administrator Guide Platform: Angular 13 · FreeSWITCH 1.10 · ICTCore 6.6 · ICTCore PHP 8.3 Demo: https://ictpbx.com