Users Guide

Figure 7. CMC conguration with Active Directory Standard Schema
In Active Directory, a standard group object is used as a role group. A user who has CMC access is a member of the role group. To give this
user access to a specic CMC card, the role group name and its domain name need to be congured on the specic CMC card. The role
and the privilege level are dened on each CMC card and not in the Active Directory. You can congure up to ve role groups in each CMC.
The following table shows the default role group privileges.
Table 24. : Default Role Group Privileges
Role Group Default Privilege Level Permissions Granted Bit Mask
1 None
• CMC Login User
• Chassis Conguration Administrator
• User Conguration Administrator
• Clear Logs Administrator
• Chassis Control Administrator (Power Commands)
• Server Administrator
• Test Alert User
• Debug Command Administrator
• Fabric A Administrator
• Fabric B Administrator
• Fabric C Administrator
0x00000f
2 None
• CMC Login User
• Clear Logs Administrator
• Chassis Control Administrator (Power Commands)
• Server Administrator
• Test Alert User
• Fabric A Administrator
• Fabric B Administrator
• Fabric C Administrator
0x00000ed9
3 None CMC Login User 0x00000001
4 None No assigned permissions 0x00000000
5 None No assigned permissions 0x00000000
Conguring User Accounts and Privileges 143