Unsolved
This post is more than 5 years old
2 Posts
0
978
August 7th, 2019 15:00
Assign users to manage only specific hardware
Reading through the OME v3.2 manual, it looks like one should be able to create a user, set the user type as "device manager" and then assign that user different devices to manage. Except, I can't find that functionality in the software anywhere. At my organization, I'd like to have one instance of Dell OpenManage Enterprise, that manages all our Dell server hardware, but not have it be a free-for-all where someone might accidentally reboot someone else's live production server. It would be preferred to create a static group and then associate a user as a manager of that group. Is there any way to accomplish this? Does this functionality exist at all and if not, why does the documentation indicate that it does?
See page 14 of the manual: https://downloads.dell.com/Manuals/all-products/esuprt_software/esuprt_ent_sys_mgmt/dell-openmanage-enterprise-v32_Users-Guide_en-us.pdf
"Device Manager - Run tasks, policies, and other actions on the devices assigned by the administrator".
Daniel My
12 Elder
•
6.2K Posts
0
August 7th, 2019 18:00
Hello
Are you not able to find the location to assign roles or are the roles not limiting access the way you want? Page 117 of the manual you linked has instructions for creating users and defining roles.
Thanks
awinterton
2 Posts
0
August 8th, 2019 08:00
I can create users and assign roles. What's missing is the ability to limit the scope of a user to specific hardware.
Daniel My
12 Elder
•
6.2K Posts
0
August 8th, 2019 12:00
I don't think that type of role assignment exists. The administrator role has the ability to add/remove devices and organize them in groups. The quote is referencing the assignment of devices to the appliance not individual users. The device manager role can manage and monitor all of the devices that are discovered by the administrator. This role is appliance wide, so if you want to limit the scope of the device manager role you could do that by running multiple appliances.
The ability to assign individual devices or groups to device managers would be a new feature. I don't think that feature exists currently. This could be a nice feature for smaller environments that have multiple device managers managing few systems, like a 10 system environment with 5 DMs managing 2 devices each. Running 5 OMEnt appliances would use a lot of system resources. Dynamic resource allocation may make multiple appliances feasible in that scenario.