Users Guide

• Standard schema solution that uses Microsoft’s default Active Directory group objects only.
• Extended schema solution that has customized Active Directory objects provided by Dell. All the access control objects are
maintained in Active Directory. It provides maximum exibility to congure user access on dierent CMCs with varying privilege
levels.
Related link
Standard Schema Active Directory Overview
Extended Schema Active Directory Overview
Standard Schema Active Directory Overview
As shown in the following gure, using standard schema for Active Directory integration requires conguration on both Active
Directory and CMC.
Figure 7. CMC conguration with Active Directory Standard Schema
In Active Directory, a standard group object is used as a role group. A user who has CMC access is a member of the role group. To
give this user access to a specic CMC card, the role group name and its domain name need to be congured on the specic CMC
card. The role and the privilege level are dened on each CMC card and not in the Active Directory. You can congure up to ve role
groups in each CMC. The following table shows the default role group privileges.
Table 23. : Default Role Group Privileges
Role Group Default Privilege Level Permissions Granted Bit Mask
1 None
• CMC Login User
• Chassis Conguration Administrator
• User Conguration Administrator
• Clear Logs Administrator
• Chassis Control Administrator (Power Commands)
• Server Administrator
• Test Alert User
• Debug Command Administrator
• Fabric A Administrator
• Fabric B Administrator
• Fabric C Administrator
0x00000f
2 None
• CMC Login User
• Clear Logs Administrator
• Chassis Control Administrator (Power Commands)
• Server Administrator
0x00000ed9
126