iDRAC9 Security Configuration Guide

iDRAC User Roles and Privileges

The iDRAC role and privilege names have changed from earlier generation of servers. The role names are shown in the table below.

Table 1. iDRAC roles
Current Generation	Prior Generation	Privileges
Administrator	Administrator	Login, Configure, Configure Users, Logs, System Control, Access Virtual Console, Access Virtual Media, System Operations, Debug
Operator	Power User	Login, Configure, System Control, Access Virtual Console, Access Virtual Media, System Operations, Debug
Read Only	Guest User	Login
None	None	None
Login	Login to iDRAC	Enables the user to log in to iDRAC.
Configure	Configure to iDRAC	Enables the user to configure iDRAC. With this privilege, a user can also configure power management, virtual console, virtual media, licenses, system settings, storage devices, BIOS settings, SCP, and so on.
NOTE:The administrator role overrides all the privileges from the other components such as BIOS setup password.
Configure Users	Configure Users	Enables the user to allow specific users to access the system.
Logs	Clear Logs	Enables the user to clear only the System Event Log (SEL).
System Control	Control and configure system	Allows power cycling the host system.
Access Virtual Console	Access Virtual Console Redirection (for blade servers) Access Virtual Console (for rack and tower servers)	Enables the user to run Virtual Console.
Access Virtual Media	Access Virtual Media	Enables the user to run and use Virtual Media.
System Operations	Test Alerts	Allows user initiated and generated events, and information is sent as an asynchronous notification and logged.
Debug	Execute Diagnostic Commands	Enables the user to run diagnostic commands.