iDRAC10 Security Configuration Guide

iDRAC User Roles and Privileges

The iDRAC role and privilege names have changed from earlier generation of servers. You can create custom roles in iDRAC10.

Table 1. iDRAC rolesThe following table describes the iDRAC roles:
Current Generation	Privileges
Administrator	Login, Configure, Configure Users, Logs, System Control, Access Virtual Console, Access Virtual Media, System Operations, Debug
Operator	Login, Configure, System Control, Access Virtual Console, Access Virtual Media, System Operations, Debug, Firmware Update
Read Only	Login
Login	Enables the user to log in to iDRAC.
Configure	Enables the user to configure iDRAC. With this privilege, a user can also configure power management, virtual console, virtual media, licenses, system settings, storage devices, BIOS settings, SCP, and so on.
NOTE:The administrator role overrides all the privileges from the other components such as BIOS setup password.
Configure Users	Enables the user to allow specific users to access the system.
Logs	Enables the user to clear only the System Event Log (SEL).
System Control	Allows power cycling the host system.
Access Virtual Console	Enables the user to run Virtual Console.
Access Virtual Media	Enables the user to run and use Virtual Media.
System Operations	Allows user initiated and generated events, and information is sent as an asynchronous notification and logged.
Debug	Enables the user to run diagnostic commands.