HP rp3440 HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition - Page 120

Creating Roles that Follow Organizational Structure, Restricting Roles, Role Time Restrictions

Get HP rp3440 PDF manuals and user guides View all HP rp3440 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 120 highlights

The following figure shows one way that an administrative user gains Admin Role right. The Admin User's initial login right is granted through the regular user role. After the initial login, more advanced rights are assigned to the Admin User through the Admin Role such as Server Reset and Remote Console. In the following figure, the Admin User gains the Admin Role right in a different way. The Admin User initially logs in through the Admin Role and is assigned admin rights such as Server Reset, Remote Console, and Login. Creating Roles that Follow Organizational Structure Often, administrators within an organization are placed into a hierarchy in which subordinate administrators must assign rights independently of ranking administrators. In this case, it is useful to have one role that represents the rights assigned by higher-level administrators, and to allow subordinate administrators to create and manage their own roles. Restricting Roles Restrictions enable you to limit the scope of a role. A role only grants rights to those users who satisfy the role's restrictions. Using restricted roles creates users with dynamic rights that change based on the time of day or network address of the client. For step-by-step instructions on how to create network and time restrictions for a role, see "Setting Role Restrictions" (page 112) or "Setting Time Restrictions" (page 112). Role Time Restrictions You can place time restrictions on iLO MP roles. Users are only granted rights that are specified for the iLO MP devices listed in the role, only if they are members of the role and meet the time restrictions for that role. iLO MP devices use local host time to enforce time restrictions. If the iLO MP device clock is not set, the role time restriction fails unless no time restrictions are specified on the role. Role-based time restrictions can only be satisfied if the time is set on the iLO MP device. The time is normally set when the host is booted, and is maintained by running the agents in the host operating system, which enables the iLO MP device to compensate for leap years and minimize clock drift with respect to the host. Events such as unexpected power loss or the flashing of iLO 120 Installing and Configuring Directory Services

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
The following figure shows one way that an administrative user gains Admin Role right. The
Admin User’s initial login right is granted through the regular user role. After the initial login,
more advanced rights are assigned to the Admin User through the Admin Role such as Server
Reset and Remote Console.
In the following figure, the Admin User gains the Admin Role right in a different way. The
Admin User initially logs in through the Admin Role and is assigned admin rights such as Server
Reset, Remote Console, and Login.
Creating Roles that Follow Organizational Structure
Often, administrators within an organization are placed into a hierarchy in which subordinate
administrators must assign rights independently of ranking administrators. In this case, it is
useful to have one role that represents the rights assigned by higher-level administrators, and
to allow subordinate administrators to create and manage their own roles.
Restricting Roles
Restrictions enable you to limit the scope of a role. A role only grants rights to those users who
satisfy the role's restrictions. Using restricted roles creates users with dynamic rights that change
based on the time of day or network address of the client.
For step-by-step instructions on how to create network and time restrictions for a role, see
“Setting
Role Restrictions” (page 112)
or
“Setting Time Restrictions” (page 112)
.
Role Time Restrictions
You can place time restrictions on iLO MP roles. Users are only granted rights that are specified
for the iLO MP devices listed in the role, only if they are members of the role and meet the time
restrictions for that role.
iLO MP devices use local host time to enforce time restrictions. If the iLO MP device clock is not
set, the role time restriction fails unless no time restrictions are specified on the role.
Role-based time restrictions can only be satisfied if the time is set on the iLO MP device. The
time is normally set when the host is booted, and is maintained by running the agents in the host
operating system, which enables the iLO MP device to compensate for leap years and minimize
clock drift with respect to the host. Events such as unexpected power loss or the flashing of iLO
120
Installing and Configuring Directory Services