Privilege Description
When a CMC user who does not have Server Administrator
privilege issues an action to be performed on a server, CMC sends a
command to the targeted server with the user’s login name and
password. If the user does not exist on the server, or if the
password does not match, the user is denied the ability to perform
the action.
If the user exists on the target server and the password matches,
the server responds with the privileges of which the user was
granted on the server. Based on the privileges responding from the
server, CMC firmware decides if the user has the right to perform
the action.
Listed below are the privileges and the actions on the server to
which the Server Administrator is entitled. These rights are applied
only when the chassis user does not have the Server Administrative
privilege on the chassis.
Server Configuration Administrator:
• Set IP address
• Set gateway
• Set subnet mask
• Set first boot device
Configure Users:
• Set iDRAC root password
• iDRAC reset
Server Control Administrator:
• Power on
• Power off
• Power cycle
• Graceful shutdown
• Server Reboot
Test Alert User User can send test alert messages.
Debug Command Administrator User can execute system diagnostic commands.
Fabric A Administrator User can set and configure the Fabric A IOM.
Fabric B Administrator User can set and configure the Fabric B, which corresponds to the
first mezzanine card in the servers and is connected to the fabric B
circuitry in the shared PCIe subsystem in the main board.
Fabric C Administrator User can set and configure the Fabric C, which corresponds to the
second mezzanine card in the servers and is connected to the
fabric C circuitry in the shared PCIe subsystem in the main board.
The CMC user groups provide a series of user groups that have preassigned user privileges.
NOTE: If you select Administrator, Power User, or Guest User, and then add or remove a privilege
from the pre-defined set, the CMC Group automatically changes to Custom.
121