Users Guide

● Standard schema solution that uses Microsoft’s default Active Directory group objects only.
● Extended schema solution that has customized Active Directory objects provided by Dell. All the access control objects
are maintained in Active Directory. It provides maximum flexibility to configure user access on different CMCs with varying
privilege levels.
Standard Schema Active Directory Overview
As shown in the following figure, using standard schema for Active Directory integration requires configuration on both Active
Directory and CMC.
In Active Directory, a standard group object is used as a role group. A user who has CMC access is a member of the role group.
To give this user access to a specific CMC card, the role group name and its domain name need to be configured on the specific
CMC card. The role and the privilege level is defined on each CMC card and not in the Active Directory. You can configure up to
five role groups in each CMC. The following table shows the default role group privileges.
Table 22. : Default Role Group Privileges
Role Group Default Privilege
Level
Permissions Granted Bit Mask
1 None
● CMC Login User
● Chassis Configuration Administrator
● User Configuration Administrator
● Clear Logs Administrator
● Chassis Control Administrator (Power Commands)
● Server Administrator
● Test Alert User
● Debug Command Administrator
● Fabric A Administrator
0x00000fff
2 None
● CMC Login User
● Clear Logs Administrator
● Chassis Control Administrator (Power Commands)
● Server Administrator
● Test Alert User
● Fabric A Administrator
0x00000ed9
3 None CMC Login User 0x00000001
4 None No assigned permissions 0x00000000
5 None No assigned permissions 0x00000000
NOTE: The Bit Mask values are used only when setting Standard Schema with the RACADM.
NOTE: For more information about user privileges, see Types of Users.
Configuring Standard Schema Active Directory
To configure CMC for an Active Directory login access:
1. On an Active Directory server (domain controller), open Active Directory Users and Computers Snap-in.
2. Using the CMC Web interface or RACADM:
a. Create a group or select an existing group.
b. Configure the role privileges.
3. Add the Active Directory user as a member of the Active Directory group to access CMC.
122
Configuring User Accounts and Privileges