•
Group DN
•
Group SID
(Kerberos authentication and Active Directory integration only)
4.
Select from the following privileges:
•
Login
•
Remote Console
•
Virtual Power and Reset
•
Virtual Media
•
Host BIOS
•
Configure iLO Settings
•
Administer User Accounts
•
Host NIC
•
Host Storage
•
Recovery Set
5.
To save the directory group changes, click
Update Group
.
Deleting a directory group
Prerequisites
• Configure iLO Settings privilege
• An iLO license that supports this feature is installed.
Procedure
1.
Click
Administration
in the navigation tree, and then click the
Directory Groups
tab.
2.
Select the check box next to the directory group that you want to delete.
3.
Click
Delete
.
4.
When prompted to confirm the request, click
OK
.
Directory group options
Each directory group includes a DN, SID, and account privileges. For Kerberos login, the SIDs of groups
are compared to the SIDs for directory groups configured for iLO. If a user is a member of multiple
groups, the user account is granted the privileges of all the groups.
You can use global and universal groups to set privileges. Domain local groups are not supported.
When you add a directory group to iLO, configure the following values:
•
Group DN
(Security Group DN)—Members of this group are granted the privileges set for the group.
The specified group must exist in the directory, and users who need access to iLO must be members
208
Deleting a directory group