Manualshelf

Users Guide

ManualsBrandsDell ManualsActive System ManagerChassis Management Controller Version 6.10 For Dell PowerEdge M1000e
141142143144145146147148149150
The Association Object allows as many or as few users and/or groups and RAC Device Objects. However, the Association Object only
includes one Privilege Object per Association Object. The Association Object connects the Users who have Privileges on RACs (CMCs).
Additionally, you can congure Active Directory objects in a single domain or in multiple domains. For example, you have two CMCs (RAC1
and RAC2) and three existing Active Directory users (user1, user2, and user3). You want to give user1 and user2 an administrator privilege
to both CMCs and give user3 a login privilege to the RAC2 card. The following gure illustrates how you set up the Active Directory objects
in this scenario.
When adding Universal Groups from separate domains, create an Association Object with Universal Scope. The Default Association objects
created by the Dell Schema Extender Utility are Domain Local Groups and does not work with Universal Groups from other domains.
Figure 9. Setting Up Active Directory Objects in a Single Domain
To congure the objects for the single domain scenario:
1 Create two Association Objects.
2 Create two RAC Device Objects, RAC1 and RAC2, to represent the two CMCs.
3 Create two Privilege Objects, Priv1 and Priv2, in which Priv1 has all privileges (administrator) and Priv2 has login privilege.
4 Group user1 and user2 into Group1.
5 Add Group1 as Members in Association Object 1 (A01), Priv1 as Privilege Objects in A01, and RAC1, RAC2 as RAC Devices in A01.
6 Add User3 as Members in Association Object 2 (A02), Priv2 as Privilege Objects in A02, and RAC2 as RAC Devices in A02.
The following gure provides an example of Active Directory objects in multiple domains. In this scenario, you have two CMCs (RAC1 and
RAC2) and three existing Active Directory users (user1, user2, and user3). User1 is in Domain1, and user2 and user 3 are in Domain2. In this
scenario, congure user1 and user 2 with administrator privileges to both CMCs and congure user3 with login privileges to the RAC2 card.
Conguring
User Accounts and Privileges 147