HP Integrity BL870c HP Integrity iLO 2 Operations Guide, Eleventh Edition - Page 197

a. Right-click the remoteAdmins role in the roles organizational unit in the region1 organizational unit, and select Properties. b. Select the Role Managed Devices subtab of the HP Management tab, and click Add. c. Using the Select Objects dialog box, browse to the HP devices organizational unit in the region1 organizational unit. Select the three iLO 2 objects created in step 2. Click OK and click Apply. d. Add users to the role. Click the Members tab, and add users using Add and the Select Objects dialog box. The devices and users are now associated. e. To set the rights for the role, use the Lights-Out Management Device Rights subtab of the HP Management tab (Figure 9-16). Figure 9-16 Setting Role Rights All users within a role will have rights assigned to the role on all he iLO 2 devices managed by the role. In this example, users in the remoteAdmins role are given full access to iLO 2 functionality. Select the boxes next to each right, and click Apply. f. To close the property sheet, click Close. 4. Using the same procedure as in step 3, edit the properties of the remoteMonitors role: a. Add the three iLO 2 devices within HP devices under region1 to the Managed Devices list on the Role Managed Devices subtab of the HP Management tab. b. Add users to the remoteMonitors role using the Members tab. c. Using the Lights-Out Management Device Rights subtab of the HP Management tab, click the Login checkbox, and click Apply and Close. Members of the remoteMonitors role are now able to authenticate and view the server status. User rights to any iLO 2 device are calculated as the sum of all the rights assigned by all the roles in which the user is a member, and in which the iLO 2 device is a managed device. Using the preceding examples, if a user is in both the remoteAdmins and remoteMonitors roles, he or she has all rights, because the remoteAdmins role has those rights. To configure an iLO 2 device from the previous example and associate it with an iLO 2 object, use settings similar to the following on the iLO 2 directory settings TUI. NOTE: In LDAP Distinguished Names, use commas, not periods, to separate each component. RIB Object DN = cn=rib-email-server,ou=hp Directory Services for eDirectory 197