Users Guide

In addition, you can set up Active Directory objects in a single domain or in multiple domains. Setting up objects in a single domain does not vary, whether you
aresettingupRAC,ServerAdministrator,orITAssistantobjects.Whenmultipledomainsareinvolved,however,therearesomedifferences.
For example, you have two DRAC 4 cards (RAC1 and RAC2) and three existing Active Directory users (user1, user2, and user3). You want to give user1 and
user2 an Administrator privilege on both DRAC 4 cards and give user3 a Login privilege on the RAC2 card. Figure8-2 shows how you set up the Active
Directory objects in this scenario.
Figure 8-2. Setting Up Active Directory Objects in a Single Domain
To set up the objects for the single domain scenario, perform the following tasks:

1. Create two Association Objects.

2. Create two RAC Product Objects, RAC1 and RAC2, to represent the two DRAC 4 cards.

3. Create two Privilege Objects, Priv1 and Priv2, in which Priv1 has all privileges (Administrator) and Priv2 has Login privileges.

4. Group User1 and User2 into Group1.

5. Add Group1 as Members in Association Object 1 (AO1), Priv1 as Privilege Objects in AO1, and both RAC1 and RAC2 as RAC Products in AO1.

6. Add User3 as Members in Association Object 2 (AO2), Priv2 as Privilege Objects in AO2, and RAC2 as RAC Products in AO2.
See "Adding Users and Privileges to Active Directory" for detailed instructions.