Users Guide

NOTE: For a list of valid bit mask values for specific user privileges, see the Chassis Management Controller for Dell
PowerEdge M1000e RACADM Command Line Reference Guide available at dell.com/support/manuals. The default
privilege value is 0, which indicates the user has no privileges enabled.
Configuring Active Directory Users
If your company uses the Microsoft Active Directory software, you can configure the software to provide access to CMC,
allowing you to add and control CMC user privileges to your existing users in your directory service. This is a licensed feature.
NOTE: Using Active Directory to recognize CMC users is supported on the Microsoft Windows 2000 and Windows Server
2003 operating systems. Active Directory over IPv6 and IPv4 is supported on Windows 2008.
You can configure user authentication through Active Directory to log in to the CMC. You can also provide role-based authority,
which enables an administrator to configure specific privileges for each user.
Supported Active Directory Authentication Mechanisms
You can use Active Directory to define CMC user access using two methods:
● Standard schema solution that uses Microsoft’s default Active Directory group objects only.
● Extended schema solution that has customized Active Directory objects provided by Dell. All the access control objects
are maintained in Active Directory. It provides maximum flexibility to configure user access on different CMCs with varying
privilege levels.
Related concepts
Standard Schema Active Directory Overview on page 128
Extended Schema Active Directory Overview on page 131
Standard Schema Active Directory Overview
As shown in the following figure, using standard schema for Active Directory integration requires configuration on both Active
Directory and CMC.
Figure 7. CMC configuration with Active Directory Standard Schema
In Active Directory, a standard group object is used as a role group. A user who has CMC access is a member of the role group.
To give this user access to a specific CMC card, the role group name and its domain name need to be configured on the specific
CMC card. The role and the privilege level are defined on each CMC card and not in the Active Directory. You can configure up
to five role groups in each CMC. The following table shows the default role group privileges.
128
Configuring User Accounts and Privileges