Dell IDRAC6 User Manual page 150

Figure 7-1 illustrates that the Association Object provides the connection
that is needed for all of the Authentication and Authorization.
Figure 7-1. Typical Setup for Active Directory Objects
iDRAC
Association Object
iDRAC
User(s)
Privilege Object
Device Object(s)
Group(s)
You can create as many or as few association objects as required. However,
you must create at least one Association Object, and you must have one iDRAC
Device Object for each iDRAC on the network that you want to integrate with
Active Directory for Authentication and Authorization with the iDRAC.
The Association Object allows for as many or as few users and/or groups as
well as iDRAC Device Objects. However, the Association Object only
includes one Privilege Object per Association Object. The Association Object
connects the Users who have Privileges on the iDRACs.
The Dell extension to the Active Directory Users and Computers MMC
Snap-in only allows associating the Privilege Object and iDRAC Objects from
the same domain with the Association Object. The Dell extension does not
allow a group or an iDRAC object from other domains to be added as a
product member of the Association Object.
Users, user groups, or nested user groups from any domain can be added into
the Association Object. Extended Schema solutions support any user group
type and any user group nesting across multiple domains allowed by
Microsoft Active Directory.
150
Using the iDRAC6 Directory Service