Configuring Ldap Or Active Directory; User Roles - HP Hyper Converged 380 Installation Manual

Configuring LDAP or Active Directory

HC380 Management UI, when used in conjunction with LDAP or AD, can restrict users so that they only
see their own VMs. If HC380 is not configured with LDAP or AD, this functionality is not available.
If the HC380 is configured with LDAP or AD, use the following steps to connect to an LDAP or AD server:
Click Connect in the Directory section.
1.
Select LDAP for a Linux server or Active Directory for a Windows server.
2.
Provide the fully qualified domain name or IP address for the LDAP or Active Directory server host
3.
and click Connect.
HC380 appliance downloads the essential certificate.
Read through the certificate, and click Trust.
4.
For the LDAP server, provide login credentials along with the Base Domain Name and click Verify.
5.
Base Domain Name example: DC=hpe DC=com
Provide a user name and password with access to the directory and click OK.
6.
The list of directory groups appears.
Click the plus sign next to each directory group to associate groups in the directory with the HC380
7.

user roles

NOTE:
• Verify connectivity between the HC380 and your AD server. For AD Certificate Services,
HC380 uses the default port (636) to connect to the AD server using SSL.
• If the directory server is added as a user in the registered groups, do not prefix the domain
name before the username (domainname\username).
User roles
Before using the system, Hewlett Packard Enterprise recommends that the following user groups are
added to the Active Directory/LDAP and users added to each group. For information about adding the
user groups to your server, see the documentation for your server.
The following table defines the list of user groups and the access rights of each group.
User
Infrastructure Administrator
Virtual Administrator
Virtual User
Read-only User
("User roles" on page 47).
Access
•
System-wide configuration: view and edit, Dashboard
•
VM Actions: view activity
•
VM-Sizes: add and edit
•
VM- Images: add and edit
•
VM Actions: view activity
•
VM-Sizes: add and edit
•
VM-Images: add and edit
•
VM: actions
•
View: activity
•
System-wide configuration-View
•
Dashboard
•
View: activity
•
VM-Sizes: view
•
VM-Images: view
•
VM: view
Completing the initial HC380 Management UI configuration 47