HP BladeSystem Onboard Administrator User Guide - HP Business ...

User Authorization
After a user has successfully authenticated and logged into Onboard Administrator, the configured directory
group to which the user belongs is identified. A user might belong to multiple directory groups, so the
directory group that gives the user the most privileges is identified.
A successful test reports the directory group with the highest privilege levels for the authenticated user.
A failed test reports the authenticated user does not have any authorization on Onboard Administrator
because the user does not belong to any of the configured directory groups.
Test Log
This is a running log of the details associated with the tests that have run and the results of those tests.
Directory Test Controls
The User Name and Password are sent to the LDAP server for authentication before the User Authentication
and User Authorization tests are performed.
Directory Groups
Column Description
Checkbox
Group Name
Privilege Level
Description
Used to select Directory Group for editing or deleting
1 to 255 characters and contains the same characters as search contexts. The group
name is used to determine LDAP users' group membership. The group name must match
one of the following five properties of a directory group: the name, distinguished name,
common name, Display Name, or SAM Account Name.
Used to determine which administrative functions the user is allowed to perform. A
user's privilege level can be administrator, operator, or user.
0 to 58 characters, containing alphanumeric characters, the dash (-), the underscore
(_), and the space. The description of the LDAP group, a more readable version of the
group name, or other useful information.
• New—To add a new Directory Group to the selected enclosure, click New. You can add a maximum of
30 Directory Groups. The Add LDAP Group screen appears.
• Edit—Select a Directory Group to be edited by selecting the checkbox next to the name of the group. To
change the settings on the Edit LDAP Group screen, click Edit.
• Delete—Select the Directory Group to be deleted by selecting the checkbox next to the name of the
group. To remove the group, click Delete.
Add an LDAP Group
Group information
NOTE: A maximum of 30 Directory Groups can be added.
Configuring the HP BladeSystem c7000 enclosure and enclosure devices 204