Installation Manual

Directory group privileges
The following privileges apply to directory groups:
• Login Privilege—Enables members of a group to log in to iLO.
• Remote Console Access—Enables users to access the host system Remote Console,
including video, keyboard, and mouse control.
• Virtual Media—Enables users to use the Virtual Media feature on the host system.
• Virtual Power and Reset—Enables users to power-cycle or reset the host system. These
activities interrupt the system availability. Users with this privilege can diagnose the system
by using the Generate NMI to System button.
• Configure iLO Settings—Enables users to configure most iLO settings, including security
settings, and to update iLO firmware.
After iLO is configured, revoking this privilege from all users prevents reconfiguration with
the web interface, HPQLOCFG, or the CLI. Users who have access to iLO RBSU, the UEFI
System Utilities, or HPONCFG can still reconfigure iLO. Only a user who has the Administer
User Accounts privilege can enable or disable this privilege.
• Administer User Accounts—Enables users to add, edit, and delete local iLO user
accounts.
Adding directory groups
Prerequisites
Configure iLO Settings privilege
Adding a directory group
1. Navigate to the Administration→User Administration page.
2. Click New in the Directory Groups section.
3. Provide the following details in the Group Information section:
• Group DN
• Group SID (Kerberos authentication and Active Directory integration only)
4. Select from the following privileges:
• Administer User Accounts
• Remote Console Access
• Virtual Power and Reset
• Virtual Media
• Configure iLO Settings
• Login Privilege
5. To save the new directory group, click Add Group.
48 Managing user accounts and directory groups