Users Guide

Privilege Description
When a server is moved to a different chassis, it inherits the slot name and priority
assigned to the slot it occupies in the new chassis. The previous slot name and priority
remain with the previous chassis.
NOTE: CMC users with the Chassis Configuration Administrator privilege
can configure power settings. However, the Chassis Control Administrator
privilege is required to perform chassis power operations, including power
on, power off, and power cycle.
User Configuration Administrator User can:
• Add a new user.
• Change the password of a user.
• Change the privileges of a user.
• Enable or disable the login privilege of a user but retain the name and other privileges
of the user in the database.
Clear Logs Administrator User can clear the hardware log and CMC log.
Chassis Control Administrator (Power
Commands)
CMC users with the Chassis Power Administrator privilege can perform all power-
related operations. They can control chassis power operations, including power on,
power off, and power cycle.
NOTE: To configure power settings, the Chassis Configuration
Administrator privilege is needed.
Server Administrator This is a blanket privilege, granting a CMC user all rights to perform any operation on any
servers present in the chassis.
When a user with Server Administrator privilege issues an action to be performed on a
server, the CMC firmware sends the command to the targeted server without checking
the privileges of a user on the server. In other words, the Server Administrator
privilege overrides any lack of administrator privileges on the server.
Without the Server Administrator privilege, a user created on the chassis can only
execute a command on a server when all of the following conditions are true:
• The same user name exists on the server.
• The same user name must have the same password on the server.
• The user must have the privilege to execute the command.
When a CMC user who does not have Server Administrator privilege issues an action
to be performed on a server, CMC sends a command to the targeted server with the
user’s login name and password. If the user does not exist on the server, or if the
password does not match, the user is denied the ability to perform the action.
If the user exists on the target server and the password matches, the server responds
with the privileges of which the user was granted on the server. Based on the privileges
responding from the server, CMC firmware decides if the user has the right to perform
the action.
Listed below are the privileges and the actions on the server to which the Server
Administrator is entitled. These rights are applied only when the chassis user does not
have the Server Administrative privilege on the chassis.
Server Configuration Administrator:
• Set IP address
• Set gateway
• Set subnet mask
• Set first boot device
Configure Users:
• Set iDRAC root password
• iDRAC reset
Server Control Administrator:
Configuring User Accounts and Privileges 109