Users Guide

Security features in OpenManage Enterprise
Some of the security features of OpenManage Enterprise are:
● User roles (Administrator, Device Manager, Viewer) with differing device management functionality.
● Hardened appliance with Security-Enhanced Linux (SELinux) and an internal firewall.
● Encryption of sensitive data in an internal database.
● Use of encrypted communication outside the appliance (HTTPS).
● Only browsers with 256-bit encryption are supported. for more information refer, Minimum system requirements for
deploying OpenManage Enterprise on page 18
WARNING: Unauthorized users can obtain OS-level access to the OpenManage Enterprise appliance bypassing
Dell EMC's security restrictions. One possibility is to attach the VMDK in another Linux VM as a secondary drive,
and thus getting OS partition access, whereby OS-level login credentials can possibly be altered. Dell EMC
recommends that customers encrypt the drive (image file) to make unauthorized access difficult. Customers
must also ensure that for any encryption mechanism used, they can decrypt files later. Else, the device would
not be bootable.
NOTE:
● Any change to the user role takes effect immediately and the impacted user(s) will be logged out of their active session.
● AD and LDAP directory users can be imported and assigned one of the OpenManage Enterprise roles (Admin,
DeviceManager, or Viewer).
● Executing device management actions requires an account with appropriate privileges on the device.
Related information
Install OpenManage Enterprise on page 17
Topics:
• Role-based OpenManage Enterprise user privileges
• OpenManage Enterprise user role types
Role-based OpenManage Enterprise user privileges
Users are assigned roles which determine their level of access to the appliance settings and device management features. This
feature is termed as Role-Based Access Control (RBAC). The console enforces one role per account. For more information
about managing users on OpenManage Enterprise, see Manage OpenManage Enterprise users on page 132.
This table lists the various privileges that are enabled for each role.
Table 2. Role-based user privileges in OpenManage Enterprise
OpenManage Enterprise
features
User levels for accessing OpenManage Enterprise
Admin Device Manager Viewer
Run reports Y Y Y
View Y Y Y
Manage templates Y Y N
Manage profiles Y Y N
Manage baseline Y Y N
2
14 Security features in OpenManage Enterprise