Users Guide

You can create as many or as few association objects as required. However, you must create at least one Association Object,
and you must have one RAC device object for each RAC (CMC) on the network that you want to integrate with Active
Directory.
Figure 8. Typical Setup for Active Directory Objects
The Association Object allows as many or as few users and/or groups and RAC Device Objects. However, the Association
Object only includes one Privilege Object per Association Object. The Association Object connects the Users who have
Privileges on RACs (CMCs).
Additionally, you can configure Active Directory objects in a single domain or in multiple domains. For example, you have two
CMCs (RAC1 and RAC2) and three existing Active Directory users (user1, user2, and user3). You want to give user1 and user2
an administrator privilege to both CMCs and give user3 a login privilege to the RAC2 card. The following figure illustrates how
you set up the Active Directory objects in this scenario.
When adding Universal Groups from separate domains, create an Association Object with Universal Scope. The Default
Association objects created by the Dell Schema Extender Utility are Domain Local Groups and does not work with Universal
Groups from other domains.
Figure 9. Setting Up Active Directory Objects in a Single Domain
To configure the objects for the single domain scenario:
1. Create two Association Objects.
2. Create two RAC Device Objects, RAC1 and RAC2, to represent the two CMCs.
3. Create two Privilege Objects, Priv1 and Priv2, in which Priv1 has all privileges (administrator) and Priv2 has login privilege.
132
Configuring User Accounts and Privileges