Users Guide

role and the privilege level is defined on each CMC card and not in the Active Directory. You can configure up to five role groups in each
CMC. The following table shows the default role group privileges.
Table 15. : Default Role Group Privileges
Role Group Default Privilege Level Permissions Granted Bit Mask
1 None
• CMC Login User
• Chassis Configuration
Administrator
• User Configuration
Administrator
• Clear Logs Administrator
• Chassis Control
Administrator (Power
Commands)
• Server Administrator
• Test Alert User
• Debug Command
Administrator
• Fabric A Administrator
0x00000fff
2 None
• CMC Login User
• Clear Logs Administrator
• Chassis Control
Administrator (Power
Commands)
• Server Administrator
• Test Alert User
• Fabric A Administrator
0x00000ed9
3 None CMC Login User 0x00000001
4 None No assigned permissions 0x00000000
5 None No assigned permissions 0x00000000
NOTE: The Bit Mask values are used only when setting Standard Schema with the RACADM.
NOTE: For more information about user privileges, see Types of Users.
Configuring Standard Schema Active Directory
To configure CMC for an Active Directory login access:
1. On an Active Directory server (domain controller), open Active Directory Users and Computers Snap-in.
2. Using the CMC Web interface or RACADM:
a) Create a group or select an existing group.
b) Configure the role privileges.
3. Add the Active Directory user as a member of the Active Directory group to access CMC.
Configuring Active Directory With Standard Schema Using CMC Web
Interface
NOTE: For information about the various fields, see the
CMC Online Help .
1. In the left pane, go to Chassis Overview, and then click User Authentication > Directory Services. The Directory Services page
is displayed.
2. Select Microsoft Active Directory (Standard Schema). The settings to be configured for standard schema is displayed on the
same page.
114
Configuring User Accounts and Privileges