Create Lync Server Control Panel Administrators


To grant access to the Lync Server 2013, do the following:

  1. Log on as a member of the Domain Admins group or the RTCUniversalServerAdmins group.

  2. Open Active Directory Users and Computers, expand your domain, right-click the Users container, and then click Properties.

  3. In CSAdministrator Properties, click the Members tab.

  4. On the Members tab, click Add. In Select Users, Contacts, Computers, Service Accounts, or Groups, locate the Enter the object names to select. Type the user name(s) or group name(s) to add to the group CSAdministrators. Click OK.

  5. On the Members tab, confirm that the users or groups that you selected are present. Click OK.


The Lync Server 2013 Control Panel is a role-based access control tool. Membership in the CsAdministrator group gives a user who is using the Lync Server 2013 Control Panel full control for all configuration functions available in Lync Server 2013 Control Panel. There are other roles available that are designed for specific functions. Users do not have to be enabled for Lync Server 2013 in order to be made members of the management groups.

  • CsArchiving: Members of this group can perform all archiving functions, such as configuring and managing the Archiving Server role.

  • CsHelpDesk: Members of this group can view the configuration and deployment, including user properties and policies. Members can also perform specific troubleshooting tasks.

  • CsLocationAdministrator: Members have the lowest level of user rights associated with Enhanced 9-1-1 (E9-1-1) management. They can create E9-1-1 locations and network identifiers and associate those in the deployment.

  • CsResponseGroupAdministrator: Members can manage and configure the Response Group service.

  • CsServerAdministrator: Members can manage, monitor, and troubleshoot all servers running Lync Server 2013.

  • CsUserAdministrator: Members can manage, enable and disable users, and assign existing policies to users.

  • CsViewOnlyAdministrator: Members can view the deployment and configuration of the server information. This membership enables a member to monitor the health of the servers running Lync Server 2010.

  • CsVoiceAdministrator: Members can create, configure, and manage voice-related settings in Lync Server 2013.

To help retain security and role-based access control integrity, add users to the groups that define what role the user performs in management of the Lync Server 2013 deployment.