User's Manual

Using the CMC With Microsoft Active Directory 189
Figure 7-2. Setting Up Active Directory Objects in a Single Domain
To configure the objects for the single domain scenario:
1
Create two Association Objects.
2 Create two RAC Device Objects, RAC1 and RAC2, to represent the two
CMCs.
3 Create two Privilege Objects, Priv1 and Priv2, in which Priv1 has all
privileges (administrator) and Priv2 has login privilege.
4 Group user1 and user2 into Group1.
5 Add Group1 as Members in Association Object 1 (A01), Priv1 as Privilege
Objects in A01, and RAC1, RAC2 as RAC Devices in A01.
6 Add User3 as Members in Association Object 2 (A02), Priv2 as Privilege
Objects in A02, and RAC2 as RAC Devices in A02.
For detailed instruction, see "Adding CMC Users and Privileges to Active
Directory" on page 198.
Figure 7-3 provides an example of Active Directory objects in multiple
domains. In this scenario, you have two CMCs (RAC1 and RAC2) and three
existing Active Directory users (user1, user2, and user3). User1 is in
AO1 AO2
Priv2Priv1Group1
RAC2RAC1User3User2User1