Users Guide

Table 22. : Default Role Group Privileges
Role Group Default Privilege Level Permissions Granted Bit Mask
1 None
• CMC Login User
• Chassis Conguration Administrator
• User Conguration Administrator
• Clear Logs Administrator
• Chassis Control Administrator (Power Commands)
• Server Administrator
• Test Alert User
• Debug Command Administrator
• Fabric A Administrator
0x00000f
2 None
• CMC Login User
• Clear Logs Administrator
• Chassis Control Administrator (Power Commands)
• Server Administrator
• Test Alert User
• Fabric A Administrator
0x00000ed9
3 None CMC Login User 0x00000001
4 None No assigned permissions 0x00000000
5 None No assigned permissions 0x00000000
NOTE: The Bit Mask values are used only when setting Standard Schema with the RACADM.
NOTE: For more information about user privileges, see Types of Users.
Conguring Standard Schema Active Directory
To congure CMC for an Active Directory login access:
1. On an Active Directory server (domain controller), open Active Directory Users and Computers Snap-in.
2. Using the CMC Web interface or RACADM:
a. Create a group or select an existing group.
b. Congure the role privileges.
3. Add the Active Directory user as a member of the Active Directory group to access CMC.
Conguring Active Directory With Standard Schema Using CMC Web Interface
NOTE: For information about the various elds, see the CMC Online Help .
1. In the left pane, go to Chassis Overview, and then click User Authentication → Directory Services. The Directory Services
page is displayed.
2. Select Microsoft Active Directory (Standard Schema). The settings to be congured for standard schema is displayed on the
same page.
3. In the Common Settings section, specify the following:
• Select Enable Active Directory and enter the timeout value for Active Directory in the AD Timeout eld.
• To obtain the Active Directory Domain Controllers from a DNS lookup select Look Up Domain Controllers with DNS, and
then select one of the following:
– User Domain from Login — to perform the DNS lookup with the domain name of the login user.
– Specify a Domain — enter the domain name to use for the DNS lookup
118