Dell POWEREDGE M1000E - Manual (Page 121)

9
Configuring User Accounts and Privileges
You can setup user accounts with specific privileges ( role-based authority ) to manage your system with CMC and
maintain system security. By default CMC is configured with a local administrator account. This default user name is
root and the password is calvin . As an administrator, you can setup user accounts to allow other users to access CMC.
You can setup up to 16 local users or use directory services such as Microsoft Active Directory or LDAP to setup
additional user accounts. Using a directory service provides a central location for managing authorized user accounts.
CMC supports role-based access to users with a set of associated privileges. The roles are administrator, operator, read
only, or none. The role defines the maximum privileges available.
Related Links
Types of Users
Configuring Local Users
Configuring Active Directory Users
Configuring Generic LDAP Users
Modifying Root User Administrator Account Settings
Types of Users
There are two types of users:
• CMC users or chassis users
• iDRAC users or server users (since the iDRAC resides on a server)
CMC and iDRAC users can be local or directory service users.
Except where a CMC user has Server Administrator privilege, privileges granted to a CMC user are not automatically
transferred to the same user on a server, because server users are created independently from CMC users. In other
words, CMC Active Directory users and iDRAC Active Directory users reside on two different branches in the Active
Directory tree. To create a local server user, the Configure Users must log in to the server directly. The Configure Users
cannot create a server user from CMC or vice versa. This rule protects the security and integrity of the servers.
Table 18. : User Types
Privilege Description
CMC Login User User can log in to CMC and view all the CMC data, but cannot add or modify
data or execute commands.
It is possible for a user to have other privileges without the CMC Login User
privilege. This feature is useful when a user is temporarily not allowed to
login. When that user’s CMC Login User privilege is restored, the user retains
all the other privileges previously granted.
Chassis Configuration Administrator User can add or change data that:
• Identifies the chassis, such as chassis name and chassis location.
• Is assigned specifically to the chassis, such as IP mode (static or DHCP),
static IP address, static gateway, and static subnet mask.
121