Installation Manual

4 Managing user accounts and directory groups
iLO user accounts
iLO enables you to manage user accounts stored locally in secure memory and directory group
accounts. Use MMC or ConsoleOne to manage directory-based user accounts.
You can create up to 12 local user accounts with custom login names and advanced password
encryption. Privileges control individual user settings, and can be customized to meet user access
requirements.
To support more than 12 users, you must have an iLO license, which enables integration with
an unlimited number of directory-based user accounts. For more information, see the following
website: http://www.hpe.com/info/ilo/licensing.
The following privileges are required for user and directory group administration:
• Administer User Accounts—Required for adding, modifying, and deleting users. If you do
not have this privilege, you can view your own settings and change your password.
• Configure iLO Settings—Required for adding, modifying, and deleting directory groups. If
you do not have this privilege, you can view directory groups.
You can also manage users with the iLO RBSU or the iLO 4 Configuration Utility.
Local user accounts
Viewing local user accounts
Navigate to the Administration→User Administration page.
The Local Users table shows the login names, user names, and assigned privileges of each
configured user. Move the cursor over an icon to see the privilege name.
iLO user privileges
The following privileges apply to user accounts:
• Remote Console Access—Enables a user to access the host system Remote Console,
including video, keyboard, and mouse control.
• Virtual Media—Enables a user to use the Virtual Media feature on the host system.
• Virtual Power and Reset—Enables a user to power-cycle or reset the host system. These
activities interrupt the system availability. A user with this privilege can diagnose the system
by using the Generate NMI to System button.
• Configure iLO Settings—Enables a user to configure most iLO settings, including security
settings, and to update the iLO firmware. This privilege does not enable local user account
administration.
After iLO is configured, revoking this privilege from all users prevents reconfiguration with
the web interface, HPQLOCFG, or the CLI. Users who have access to iLO RBSU, the UEFI
44 Managing user accounts and directory groups