Typical Setup For Active Directory Objects - Dell Remote Access Controller 4 Firmware Version 1.30 User Manual

Figure 5-1. Typical Setup for Active Directory Objects
Association Object
User(s) Group(s) Privilege Object RAC Device Object(s)
RAC4 Privilege Object
You can create as many or as few association objects as you want or need. However, you must
create at least one Association Object, and you must have one RAC Device Object for each RAC
(DRAC 4) on the network that you want to integrate with Active Directory for Authentication
and Authorization with the RAC (DRAC 4). The Association Object allows for as many or as
few users and/or groups as well as RAC Device Objects. However, the Association Object only
has one Privilege Object per Association Object. The Association Object connects the "Users"
who have "Privileges" on the RACs (DRAC 4s).
In addition, you can set up Active Directory objects in a single domain or in multiple domains.
For example, you have two DRAC 4 cards (RAC1 and RAC2) and three existing Active Directory
users (user1, user2, and user3). You want to give user1 and user2 an administrator privilege to
both DRAC 4 cards and give user3 a login privilege to the RAC2 card. Figure 5-2 shows how you
set up the Active Directory objects in this scenario.
®
87
Using the DRAC 4 With Microsoft Active Directory