# Grant Management Permission of Recording Files

Out of the box, call recordings can only be managed by the administrator. If you want other people to work with recordings, you grant that access through a role and then assign the role to the extension users who need it. Once assigned, those users can manage recordings from the Cloud Voice App.

:::note
A role is a reusable bundle of permissions. You define what the role is allowed to do once, then attach it to as many extensions as you like. This saves you from setting permissions on each person one at a time.
:::

The workflow has two parts: first configure a role with the recording permissions you want, then attach that role to one or more extensions.

## Configure the role

1. Log in to the Cloud Voice Dashboard at https://voice.izt.cloud and click **Login** to open your phone system's management portal with full administrator access. Open **Extension and Trunk > Role**, then open the role you want to change for editing.
2. Find the **Reports and Recordings** section. Here you decide which extensions the role can act on and what it is allowed to do with their recordings:
   - **Manage Extensions**: Choose the range of extensions whose recordings this role can reach.
   - **Recording Files Operation Permission**: Choose the allowed actions, **Play**, **Download**, and **Delete**.
3. Click **Save**.

:::caution
The **Manage Extensions** range decides which recordings the role can see at all. If an extension is not in that range, the user will not be able to reach its recordings no matter which operation permissions you tick. Confirm the range covers every extension the user needs to work with.
:::

:::tip
Grant only the actions the user actually needs. If someone only listens to calls for quality checks, give them **Play** (and perhaps **Download**) but leave **Delete** off. This limits the damage if the account is misused.
:::

:::danger
**Delete** lets the user permanently remove call recordings. Deleted recordings cannot be recovered, and they may be needed later for disputes, training, or compliance records. Only grant **Delete** to people you trust with that responsibility.
:::

## Assign the role to a user

1. Open **Extension** and edit the extension you want to give recording access to.
2. In the **User Information** section, pick the role you just configured from the **User Role** drop-down list.
3. Click **Save**, then **Apply**.

:::caution
The change does not take effect until you click **Apply**. It is easy to click **Save** and walk away, but without **Apply** the new permissions will not reach the extension.
:::

After you apply the change, the extension user can sign in to the Cloud Voice App and manage recordings within the limits set by the role.