Users Guide

Privilege Description
Without the Server Administrator privilege, a user created on the
chassis can only execute a command on a server when all of the
following conditions are true:
• The same user name exists on the server.
• The same user name must have the same password on the
server.
• The user must have the privilege to execute the command.
When a CMC user who does not have Server Administrator
privilege issues an action to be performed on a server, CMC sends a
command to the targeted server with the user’s login name and
password. If the user does not exist on the server, or if the
password does not match, the user is denied the ability to perform
the action.
If the user exists on the target server and the password matches,
the server responds with the privileges of which the user was
granted on the server. Based on the privileges responding from the
server, CMC firmware decides if the user has the right to perform
the action.
Listed below are the privileges and the actions on the server to
which the Server Administrator is entitled. These rights are applied
only when the chassis user does not have the Server Administrative
privilege on the chassis.
Server Configuration Administrator:
• Set IP address
• Set gateway
• Set subnet mask
• Set first boot device
Configure Users:
• Set iDRAC root password
• iDRAC reset
Server Control Administrator:
• Power on
• Power off
• Power cycle
• Graceful shutdown
• Server Reboot
Test Alert User User can send test alert messages.
Debug Command Administrator User can execute system diagnostic commands.
Fabric A Administrator User can set and configure the Fabric A IOM, which resides in either
slot A1 or slot A2 of the I/O slots.
Fabric B Administrator User can set and configure the Fabric B IOM, which resides in either
slot B1 or slot B2 of the I/O slots.
147