Setting Role Rights - HP Integrity BL870c Operation Manual

a. Right-click the remoteAdmins role in the roles organizational unit in the region1
organizational unit, and select Properties.
b. Select the Role Managed Devices subtab of the HP Management tab, and click Add.
c. Using the Select Objects dialog box, browse to the HP devices organizational unit in
the region1 organizational unit. Select the three iLO 2 objects created in step 2. Click
OK and click Apply.
d. Add users to the role. Click the Members tab, and add users using Add and the Select
Objects dialog box. The devices and users are now associated.
e. To set the rights for the role, use the Lights-Out Management Device Rights subtab of
the HP Management tab
Figure 9-16 Setting Role Rights
All users within a role will have rights assigned to the role on all he iLO 2 devices
managed by the role. In this example, users in the remoteAdmins role are given full
access to iLO 2 functionality. Select the boxes next to each right, and click Apply.
f. To close the property sheet, click Close.
4. Using the same procedure as in step 3, edit the properties of the remoteMonitors role:
a. Add the three iLO 2 devices within HP devices under region1 to the Managed Devices
list on the Role Managed Devices subtab of the HP Management tab.
b. Add users to the remoteMonitors role using the Members tab.
c. Using the Lights-Out Management Device Rights subtab of the HP Management tab,
click the Login checkbox, and click Apply and Close. Members of the remoteMonitors
role are now able to authenticate and view the server status.
User rights to any iLO 2 device are calculated as the sum of all the rights assigned by all the roles
in which the user is a member, and in which the iLO 2 device is a managed device. Using the
preceding examples, if a user is in both the remoteAdmins and remoteMonitors roles, he or she
has all rights, because the remoteAdmins role has those rights.
To configure an iLO 2 device from the previous example and associate it with an iLO 2 object,
use settings similar to the following on the iLO 2 directory settings TUI.
NOTE: In LDAP Distinguished Names, use commas, not periods, to separate each component.
RIB Object DN = cn=rib-email-server,ou=hp
(Figure 9-16).
Directory Services for eDirectory 197