Team overview
Path: /settings → Team tab
The Team tab surfaces the team's identity, the base numbers assigned to it, team-scoped egress trunks and pools for outbound transfers, AWS Secrets Manager configuration for secret storage, and call recording configuration. Secrets Manager is the foundation for SECRET-type variables.
Team info
| Field | Editable | Description |
|---|---|---|
| Team Name | No | Set by a superadmin. Read-only here. |
Base numbers
Lists base numbers assigned to your team by a superadmin. Per row:
| Field | Editable | Description |
|---|---|---|
| Number | No | The phone number. |
| Description | No | Set by superadmin. |
| Header Manipulation Configs | ADMIN | Team-specific configs (multi-select). Default platform configs are applied separately. |
AWS Secrets Manager
| Field | Required | Description |
|---|---|---|
| AWS Region | Yes | Region where secrets live. Default eu-central-1. |
| Secrets Manager Key | Yes | Path/key for your team's secrets (e.g. delphi/teams/<team>/variables). |
| AWS Assume Role ARN | No | Cross-account setups only. arn:aws:iam::<ACCOUNT_ID>:role/<ROLE_NAME>. Empty if same account. |
| AWS Account ID | Auto | Extracted from Role ARN. |
| Complete ARN | Auto | Full Secrets Manager ARN with copy button. |
Same-account vs cross-account
- Same-account — Delphi shares your AWS account. Only region + key required.
- Cross-account — Delphi assumes a role into your account. Each team's secrets isolated; CloudTrail audit on your side; you can revoke at any time.
For the IAM role setup, see AWS security setup.
Call recording
| Field | Required | Description |
|---|---|---|
| Recording S3 Bucket | No | Bucket for recordings. Required if recording is used. |
| Recording AWS Region | No | Default eu-central-1. |
| Recording IAM Role ARN | No | Cross-account setups only. |
Recording must also be enabled per-app. When configured, the platform installs an S3 lifecycle rule expiring recordings under recordings/ after 180 days.
Egress (outbound) routing
Team admins configure reusable outbound SIP routing for number transfers. The Egress section uses the same Trunks | Pools layout as platform admin, scoped to your team.
| Sub-tab | What it manages |
|---|---|
| Trunks | Individual carrier or PBX destinations — SIP URI, transport, authentication, caller ID, codec preferences, and links to team base numbers. |
| Pools | Named routing sets that group one or more trunks for round robin or priority / failover transfer behavior. |
Trunks are the building blocks; pools are what flows, managed LLM callbacks, and failover policies reference by routing key (routeId). Full sip: or sips: URI targets bypass pool lookup and route by URI host instead.
How this connects to transfers
Outbound transfers need a path from Delphi to your carrier or PBX:
- Number or
tel:targets — require egress. Set an Egress Base Number on the endpoint, then either link trunks to that base number or create a pool and select it in flow transfer settings (Egress route /routingPool). With no pool selected, the default base-number pool uses trunks linked directly to the base number. sip:/sips:targets — route by URI host; pools are not used for those transfers.- Restrictions still apply — team transfer-restriction overrides and platform policy are checked before TelPro places the outbound leg.
Full runtime detail, failure modes, and Kamailio/Redis behavior are in Egress routing.
Pool and trunk changes auto-sync to TelPro. You do not need a manual re-sync after ordinary edits.
Typical team workflow
- Create the trunks your carriers require (digest, registration, TLS mutual, and so on).
- Open Pools → New → set Name, Route ID, base number, strategy, and member trunks with priorities.
- Reference the pool from flow transfer settings or managed callback fields such as
routingPool/transferRoutingPool. - Verify with a test transfer and inspect the conversation Debug tab SIP ladder.
Platform-wide egress objects (no team owner) are visible here when your deployment uses shared routing. SUPERUSERs manage those from Egress routing in Admin Settings.
Workflows
Configure Secrets Manager
- Cross-account: finish the AWS security setup.
- Set Region + Secrets Manager Key.
- Set the Assume Role ARN (cross-account only).
- Save and verify the Complete ARN.
- You can now create SECRET variables.
Configure call recording
- Enter the S3 bucket name (+ region if not the default).
- Set the Recording IAM Role ARN (cross-account only).
- Save.
- Enable recording on each app that should produce recordings.
See also
- Egress routing — platform-wide trunks and pools (SUPERUSER).
- Variables and secrets — uses Secrets Manager.
- AWS security setup — IAM role setup.
- Header manipulation.
- Managed callback actions —
routingPool/transferRoutingPoolfields.