Team overview
Path: /settings → Team tab
The Team tab surfaces the team's identity, resilience defaults, the base numbers assigned to it, team-scoped egress trunks and pools for outbound transfers, AWS Secrets Manager configuration for secret storage, and call recording configuration. Secrets Manager is the foundation for SECRET-type variables.
Team info
| Field | Editable | Description |
|---|---|---|
| Team Name | No | Set by a superadmin. Read-only here. |
Base numbers
Lists base numbers assigned to your team by a superadmin. Per row:
| Field | Editable | Description |
|---|---|---|
| Number | No | The phone number. |
| Description | No | Set by superadmin. |
| Header Manipulation Configs | ADMIN | Team-specific configs (multi-select). Default platform configs are applied separately. |
AWS Secrets Manager
| Field | Required | Description |
|---|---|---|
| AWS Region | Yes | Region where secrets live. Default eu-central-1. |
| Secrets Manager Key | Yes | Path/key for your team's secrets (e.g. delphi/teams/<team>/variables). |
| AWS Assume Role ARN | No | Cross-account setups only. arn:aws:iam::<ACCOUNT_ID>:role/<ROLE_NAME>. Empty if same account. |
| AWS Account ID | Auto | Extracted from Role ARN. |
| Complete ARN | Auto | Full Secrets Manager ARN with copy button. |
Same-account vs cross-account
- Same-account — Delphi shares your AWS account. Only region + key required.
- Cross-account — Delphi assumes a role into your account. Each team's secrets isolated; CloudTrail audit on your side; you can revoke at any time.
For the IAM role setup, see AWS security setup.
Call recording
| Field | Required | Description |
|---|---|---|
| Recording S3 Bucket | No | Bucket for recordings. Required if recording is used. |
| Recording AWS Region | No | Default eu-central-1. |
| Recording IAM Role ARN | No | Cross-account setups only. |
Recording must also be enabled per-app. When configured, the platform installs an S3 lifecycle rule expiring recordings under recordings/ after 180 days. Transcript retention follows the same app Recording toggle: when recording is on, full transcript text is stored with the S3 artefact regardless of platform PII redaction. See Conversations → Recording and transcript retention.
Resilience defaults
Team admins can either inherit the platform resilience defaults or enable a team override. The effective settings are merged in this order:
- Platform defaults from Platform settings.
- Team override on this tab, when enabled.
- Flow-level provider and error-handling settings in the Flow Designer.
Use team overrides when one tenant needs different provider timeout/retry defaults, bot-delay comfort messages, or failover transfer/hangup behavior from the platform baseline. Leave the override off when the team should follow platform policy.
Egress (outbound) routing
Team admins configure reusable outbound SIP routing for number transfers. The Egress section uses the same Trunks | Pools layout as platform admin, scoped to your team.
| Sub-tab | What it manages |
|---|---|
| Trunks | Individual carrier or PBX destinations — SIP URI, transport, authentication, caller ID, codec preferences, and links to team base numbers. |
| Pools | Named routing sets that group one or more trunks for round robin or priority / failover transfer behavior. |
Trunks are the building blocks; pools are what flows, managed LLM callbacks, and failover policies reference by routing key (routeId). Full sip: or sips: URI targets bypass pool lookup and route by URI host instead.
How this connects to transfers
Outbound transfers need a path from Delphi to your carrier or PBX:
- Number or
tel:targets — require egress. Set an Egress Base Number on the endpoint, then either link trunks to that base number or create a pool and select it in flow transfer settings (Egress route /routingPool). With no pool selected, the default base-number pool uses trunks linked directly to the base number. sip:/sips:targets — route by URI host; pools are not used for those transfers.- Restrictions still apply — team transfer-restriction overrides and platform policy are checked before TelPro places the outbound leg.
Full runtime detail, failure modes, and Kamailio/Redis behavior are in Egress routing.
Pool and trunk changes auto-sync to TelPro. You do not need a manual re-sync after ordinary edits.
Typical team workflow
- Create the trunks your carriers require (digest, registration, TLS mutual, and so on).
- Open Pools → New → set Name, Route ID, base number, strategy, and member trunks with priorities.
- Reference the pool from flow transfer settings or managed callback fields such as
routingPool/transferRoutingPool. - Verify with a test transfer and inspect the conversation Debug tab SIP ladder.
Platform-wide egress objects (no team owner) are visible here when your deployment uses shared routing. SUPERUSERs manage those from Egress routing in Admin Settings.
Workflows
Configure Secrets Manager
- Cross-account: finish the AWS security setup.
- Set Region + Secrets Manager Key.
- Set the Assume Role ARN (cross-account only).
- Save and verify the Complete ARN.
- You can now create SECRET variables.
Configure call recording
- Enter the S3 bucket name (+ region if not the default).
- Set the Recording IAM Role ARN (cross-account only).
- Save.
- Enable recording on each app that should produce recordings.
See also
- Team default secrets — platform-managed OpenAI/Azure/WebRTC keys provisioned on team create.
- Egress routing — platform-wide trunks and pools (SUPERUSER).
- Variables and secrets — uses Secrets Manager.
- AWS security setup — IAM role setup.
- Header manipulation.
- Managed callback actions —
routingPool/transferRoutingPoolfields.