Users Guide

Supported Active Directory authentication mechanisms
You can use Active Directory to dene CMC user access using two methods:
• Standard schema solution that uses Microsoft’s default Active Directory group objects only.
• Extended schema solution that has customized Active Directory objects provided by Dell. All the access control objects are maintained
in Active Directory. It provides maximum exibility to congure user access on dierent CMCs with varying privilege levels.
Standard schema Active Directory overview
As shown in the following gure, using standard schema for Active Directory integration requires conguration on both Active Directory and
CMC.
In Active Directory, a standard group object is used as a role group. A user who has CMC access is a member of the role group. To give this
user access to a specic CMC card, the role group name and its domain name need to be congured on the specic CMC card. The role
and the privilege level is dened on each CMC card and not in the Active Directory. You can congure up to ve role groups in each CMC.
The following table shows the default role group privileges.
Table 20. : Default Role Group Privileges
Role Group Default Privilege Level Permissions Granted Bit Mask
1 None
• CMC Login User
• Chassis Conguration Administrator
• User Conguration Administrator
• Clear Logs Administrator
• Chassis Control Administrator (Power Commands)
• Server Administrator
• Test Alert User
• Debug Command Administrator
• Fabric A Administrator
0x00000f
2 None
• CMC Login User
• Clear Logs Administrator
• Chassis Control Administrator (Power Commands)
• Server Administrator
• Test Alert User
• Fabric A Administrator
0x00000ed9
3 None CMC Login User 0x00000001
4 None No assigned permissions 0x00000000
5 None No assigned permissions 0x00000000
NOTE: The Bit Mask values are used only when setting Standard Schema with the RACADM.
NOTE: For more information about user privileges, see Types of Users.
114 Conguring user accounts and privileges