Integrated Dell Remote Access Controller 7 (iDRAC7) Version 1.50.50 User's Guide

PDF

Standard Schema Active Directory Overview

As shown in the following figure, using standard schema for Active Directory integration requires configuration on both Active Directory and iDRAC7.

Figure 1. Configuration of iDRAC7 with Active Directory Standard Schema Image that shows configuration of Active Directory and iDRAC7 using standard schema

Image that shows configuration of Active Directory and iDRAC7 using standard schema

In Active Directory, a standard group object is used as a role group. A user who has iDRAC7 access is a member of the role group. To give this user access to a specific iDRAC7, the role group name and its domain name need to be configured on the specific iDRAC7. The role and the privilege level is defined on each iDRAC7and not in the Active Directory. You can configure up to five role groups in each iDRAC7. Table reference no shows the default role group privileges.

Table 1. Default Role Group Privileges
Role Groups	Default Privilege Level	Permissions Granted	Bit Mask
Role Group 1	None	Login to iDRAC, Configure iDRAC, Configure Users, Clear Logs, Execute Server Control Commands, Access Virtual Console, Access Virtual Media, Test Alerts, Execute Diagnostic Commands	0x000001ff
Role Group 2	None	Login to iDRAC, Configure iDRAC, Execute Server Control Commands, Access Virtual Console, Access Virtual Media, Test Alerts, Execute Diagnostic Commands	0x000000f9
Role Group 3	None	Login to iDRAC	0x00000001
Role Group 4	None	No assigned permissions	0x00000000
Role Group 5	None	No assigned permissions	0x00000000

NOTE: The Bit Mask values are used only when setting Standard Schema with the RACADM.

Related concepts

Extended Schema Active Directory Overview