Installation Manual

More information

Directory group privileges

Directory group settings

Editing directory groups

Prerequisites

Configure iLO Settings privilege

Editing a directory group

1. Navigate to the Administration→User Administration page.

2. Select a group in the Directory Groups section, and then click Edit.

3. Provide the following details in the Group Information section:

• Group DN

• Group SID (Kerberos authentication and Active Directory integration only)

4. Select from the following privileges:

• Administer User Accounts

• Remote Console Access

• Virtual Power and Reset

• Virtual Media

• Configure iLO Settings

• Login Privilege

5. To save the directory group changes, click Update Group.

More information

Directory group privileges

Directory group settings

Each directory group includes a DN, SID, and account privileges. For Kerberos login, the SIDs

of groups are compared to the SIDs for directory groups configured for iLO. If a user is a member

of multiple groups, the user account is granted the privileges of all of the groups.

You can use global and universal groups to set privileges. Domain local groups are not supported.

When you add a directory group to iLO, configure the following values:

• Group DN (Security Group DN)—Members of this group are granted the privileges set for

the group. The specified group must exist in the directory, and users who need access to

iLO must be members of this group. Enter a DN from the directory (for example, CN=Group1,

OU=Managed Groups, DC=domain, DC=extension).

Shortened DNs are also supported (for example, Group1). The shortened DN is not a unique

match. Hewlett Packard Enterprise recommends using the fully qualified DN.

• Group SID (Security ID)—Microsoft Security ID is used for Kerberos and directory group

authorization. This value is required for Kerberos authentication. The required format is

S-1-5-2039349.

Directory groups 49