User's Manual

120 Using the CMC Web Interface
Adding and Configuring CMC Users
To manage your system with the CMC and maintain system security, create
unique users with specific administrative permissions (or role-based
authority). For additional security, you can also configure alerts that are
e-mailed to specific users when a specific system event occurs.
User Types
There are two types of users: CMC users and iDRAC users. CMC users are
also known as "chassis users." Since iDRAC resides on the server, iDRAC users
are also known as "server users."
CMC users can be local users or Active Directory users. iDRAC users can also
be local users or Active Directory users.
Except where a CMC user has Server Administrator privilege, privileges
granted to a CMC user are not automatically transferred to the same user on
a server, because server users are created independently from CMC users. In
other words, CMC Active Directory users and iDRAC Active Directory users
reside on two different branches in the Active Directory tree. To create a local
server user, the User Configuration Administrator must log into the server
directly. The User Configuration Administrator cannot create a server user
from CMC or vice versa. This rule protects the security and integrity of the
servers.
Table 5-9, Table 5-10, and Table 5-11 describe CMC user privileges (local or
Active Directory), and what operations a CMC user can execute on the
chassis and on the servers based on the privileges he is granted. The term user
or users, therefore, should be understood as CMC users. Server users will be
explicitly specified.