User's Manual

Using the iDRAC with Microsoft Active Directory 125
Active Directory Standard Schema Overview
As shown in Figure 6-4, using standard schema for Active Directory
integration requires configuration on both Active Directory and the iDRAC.
On the Active Directory side, a standard group object is used as a role group.
A user who has iDRAC access will be a member of the role group. To give this
user access to a specific iDRAC, the role group name and its domain name
need to be configured on the specific iDRAC. Unlike the extended schema
solution, the role and the privilege level is defined on each iDRAC, not in the
Active Directory. Up to five role groups can be configured and defined in each
iDRAC. Table 5-12 on page 85 shows the privileges level of the role groups
and Table 6-9 shows the default role group settings.
Figure 6-4. Configuration of iDRAC with Microsoft Active Directory and the Standard
Schema
Role
Group
Role
Group Name
and Domain
Name
Role
Definition
User
Configuration on Active
Directory Side
Configuration on
iDRAC Side