Data Domain: iDRAC Operator User Changes in DDOS

Summary: Starting with Data Domain releases from April 2026, updates have been introduced to iDRAC operator user behavior as part of Dell’s ongoing security enhancements. These updates help protect your system by preventing prolonged or unauthorized privileged access, while continuing to ensure full supportability. When maintenance that requires elevated access is necessary, Dell Support will follow established and approved procedures and will return the system to a compliant and secure state once the work is complete. ...

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

  • On RLCE systems running newer DDOS versions, users assigned the iDRAC Operator role are unable to access or launch the Virtual Console.
  • The Virtual Console option may be unavailable, disabled, or return an access-related error.
  • Operator users may also observe that previously available capabilities (such as power operations or virtual media access) are no longer accessible.

Cause

With the latest DDOS releases, the iDRAC Operator role on RLCE systems has reduced privileges by design. Operator access is now limited to the following:
  • Login
  • System Operations (event and notification visibility)
  • Debug (diagnostic commands)
All other privileges have been removed, including:
  • Access to Virtual Console
  • Access to Virtual Media
  • System Control and power management
  • Storage management
  • Clear Logs
  • iDRAC configuration
These restricted functions require Dell Support assistance.

 

Products Affected

Only where iDRAC users are created through DDOS and Retention Lock Compliance (RLC) is enabled.

 
PowerProtect DD (PPDD)
  • All supported platforms.
DP Series
  • DP5900 (Uses DD6900)
  • DP8900 (Uses DD9900)
  • DP8400 (Uses DD9400)

Resolution

This behavior is expected by design.

Note: The iDRAC and DDOS teams are currently working to restore power cycle capability for the Operator role in a future DDOS release.

Additional Information

Reference: 

DSA-2026-060: Security Update for Dell PowerProtect Data Domain Multiple Vulnerabilities

Affected Products

Data Domain, PowerProtect DP5900, PowerProtect DP8400, PowerProtect DP8900
Article Properties
Article Number: 000453531
Article Type: Solution
Last Modified: 25 مايو 2026
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.