Users Guide

Configuring Active Directory Users
If your company uses the Microsoft Active Directory software, you can configure the software to provide access to
iDRAC7, allowing you to add and control iDRAC7 user privileges to your existing users in your directory service. This is a
licensed feature.
NOTE:
Using Active Directory to recognize iDRAC7 users is supported on the Microsoft Windows 2000, Windows
Server 2003, and Windows Server 2008 operating systems.
You can configure user authentication through Active Directory to log in to the iDRAC7. You can also provide role-based
authority, which enables an administrator to configure specific privileges for each user.
The iDRAC7 role and privilege names have changed from earlier generation of servers. The role names are:
Table 12. iDRAC7 Roles
Current Generation Prior Generation Privileges
Administrator Administrator Login, Configure, Configure Users, Logs, System Control, Access
Virtual Console, Access Virtual Media, System Operations, Debug
Operator Power User Login, Configure, System Control, Access Virtual Console, Access
Virtual Media, System Operations, Debug
Read Only Guest User Login
None None None
Table 13. iDRAC7 User Privileges
Current Generation Prior Generation Description
Login Login to iDRAC Enables the user to log in to iDRAC.
Configure Configure iDRAC Enables the user to configure iDRAC.
Configure Users Configure Users Enables the user to allow specific users to access the system.
Logs Clear Logs Enables the user to clear the System Event Log (SEL).
System Control Execute Server Control
Commands
Allows power cycling the host system.
Access Virtual
Console
Access Virtual Console
Redirection (for blade
servers)
Access Virtual Console
(for rack and tower
servers)
Enables the user to run Virtual Console.
Access Virtual
Media
Access Virtual Media Enables the user to run and use Virtual Media.
System Operations Test Alerts Allows user initiated and generated events, and information is sent
as an asynchronous notification and logged.
Debug Execute Diagnostic
Commands
Enables the user to run diagnostic commands.
Related Links
Prerequisites for Using Active Directory Authentication for iDRAC7
Supported Active Directory Authentication Mechanisms
106