Ooma Employee Proxy for ZSwitch

Important Note

To comply with SOX regulations, Ooma employees may only use one of the proxies below to access ZSwitch. If you do not yet have access, please visits this page for a step guide to get access.

Always use the proxy with the lowest permissions necessary to complete your task. For example, if you have Super-Duper access but only need to read account data for troubleshooting, use the read-only proxy to avoid accidentally exceeding the permissions required to complete your task.

Proxy Information

Super-Duper

Can read/write to all ZSwitch APIs, even the master account

Excludes GET requests to the api_key endpoint API of any account

Super

Can read/write to all ZSwitch APIs.

Excludes GET requests to the api_key endpoint API of any account

Also exluding PUT/POST/DELETE requests to the master account's API endpoints

Read-Only

Can read all ZSwitch APIs.

Excludes GET requests to the api_key endpoint API of any account

Tokenized

For support access. Users may not directly authenticate with ZSwitch and must supply a pre-scoped and time restricted API token that is limited to the account relevant to a particular support ticket they are working

Excludes GET requests to the api_key endpoint API of any account

Also excluding ANY requests to the master account

Tokenized Read Only

Identical to Tokenized proxy, except read only. This allows support staff to self-limit their access even if provided a higher level of access by the token so that they do not make un-intentional changes.

Test-Accounts

Full access to specific and pre-approved test accounts.

Employee proxy must be used, but separate SSO login is not required as is normally the case.