Using the iDRAC6 Directory Service 169NOTE: The Bit Mask values are used only when setting Standard Schemausing RACADM.Single Domain Versus Multiple Domain ScenariosIf all the login users and role groups, and the nested groups, are in the samedomain, then only the domain controllers’ addresses must be configured oniDRAC6. In this single domain scenario, any group type is supported.If all the login users and role groups, or any of the nested groups, are frommultiple domains, then Global Catalog server addresses are required to beconfigured on iDRAC6. In this multiple domain scenario, all the role groupsand the nested groups, if any, must be a Universal Group type.Table 7-9. Default Role Group PrivilegesRoleGroupsDefault PrivilegeLevelPermissions Granted Bit MaskRoleGroup 1Administrator Login to iDRAC, ConfigureiDRAC, Configure Users, ClearLogs, Execute Server ControlCommands, Access VirtualConsole, Access Virtual Media,Test Alerts, Execute DiagnosticCommands0x000001ffRoleGroup 2Operator Login to iDRAC, ConfigureiDRAC, Execute Server ControlCommands, Access VirtualConsole, Access Virtual Media,Test Alerts, Execute DiagnosticCommands0x000000f9RoleGroup 3Read Only Login to iDRAC 0x00000001RoleGroup 4None No assigned permissions 0x00000000RoleGroup 5None No assigned permissions 0x00000000
