Users Guide

Configuring User Accounts and Privileges
You can setup user accounts with specific privileges (role-based authority) to manage your system with CMC and maintain
system security. By default CMC is configured with a local administrator account. This default user name is root and the
password is calvin. As an administrator, you can setup user accounts to allow other users to access CMC.
You can setup up to 16 local users or use directory services such as Microsoft Active Directory or LDAP to setup additional user
accounts. Using a directory service provides a central location for managing authorized user accounts.
CMC supports role-based access to users with a set of associated privileges. The roles are administrator, operator, read only, or
none. The role defines the maximum privileges available.
Related concepts
Types of Users on page 122
Configuring Local Users on page 126
Configuring Active Directory Users on page 128
Configuring Generic LDAP Users on page 141
Related tasks
Modifying Root User Administrator Account Settings on page 125
Topics:
• Types of Users
• Modifying Root User Administrator Account Settings
• Configuring Local Users
• Configuring Active Directory Users
• Configuring Generic LDAP Users
Types of Users
There are two types of users:
● CMC users or chassis users
● iDRAC users or server users (since the iDRAC resides on a server)
CMC and iDRAC users can be local or directory service users.
Except where a CMC user has Server Administrator privilege, privileges granted to a CMC user are not automatically
transferred to the same user on a server, because server users are created independently from CMC users. In other words,
CMC Active Directory users and iDRAC Active Directory users reside on two different branches in the Active Directory tree. To
create a local server user, the Configure Users must log in to the server directly. The Configure Users cannot create a server
user from CMC or vice versa. This rule protects the security and integrity of the servers.
Table 20. User Types
Privilege Description
CMC Login User User can log in to CMC and view all the CMC data, but cannot add or modify data or execute
commands.
It is possible for a user to have other privileges without the CMC Login User privilege. This feature is
useful when a user is temporarily not allowed to log in. When that user’s CMC Login User privilege is
restored, the user retains all the other privileges previously granted.
9
122 Configuring User Accounts and Privileges