Users Guide

In Active Directory, a standard group object is used as a role group. A user who has CMC access is a
member of the role group. To give this user access to a specific CMC card, the role group name and its
domain name need to be configured on the specific CMC card. The role and the privilege level is defined
on each CMC card and not in the Active Directory. You can configure up to five role groups in each CMC.
The following table shows the default role group privileges.
Table 21. : Default Role Group Privileges
Role Group Default Privilege Level Permissions Granted Bit Mask
1 None
• CMC Login User
• Chassis
Configuration
Administrator
• User Configuration
Administrator
• Clear Logs
Administrator
• Chassis Control
Administrator (Power
Commands)
• Server Administrator
• Test Alert User
• Debug Command
Administrator
• Fabric A
Administrator
• Fabric B
Administrator
• Fabric C
Administrator
0x00000fff
2 None
• CMC Login User
• Clear Logs
Administrator
0x00000ed9
140