Filter
Top Products
198 User Guide Integrated Lights-Out
Creating Roles to Follow Organizational Structure
Often, the administrators within an organization are placed into a hierarchy in
which subordinate administrators must assign rights independently of ranking
administrators. In this case, it is useful to have one role that represents the rights
assigned by higher-level administrators and to allow the subordinate
administrators to create and manage their own roles.
Restricting Roles
Restrictions allow administrators to limit the scope of a role. A role only grants
rights to those users that satisfy the role's restrictions. Using restricted roles
results in users with dynamic rights that change based on the time of day or
network address of the client.
For step-by-step instructions on how to create network and time restrictions on a
role, refer to "Active Directory Role Restrictions (on page 165
)" or "eDirectory
Role Restrictions (on page 179
, "Role Restrictions" on page 178)" sections.
Role Time Restrictions
Administrators can place time restrictions on LOM roles. Users are granted the
rights specified for the LOM devices listed in the role, only if they are members
of the role and meet the time restrictions for that role.
LOM devices use local host time to enforce time restrictions. If the LOM device
clock is not set, the role time restriction fails unless no time restrictions are
specified on the role.
Role-based time restrictions can only be satisfied if the time is set on the LOM
device. The time is normally set when the host is booted, and it is maintained by
running the agents in the host operating system, which allows the LOM device to
compensate for leap year and minimize clock drift with respect to the host.
Events, such as unexpected power loss or flashing LOM firmware, can cause the
LOM device clock to not be set. Also, the host time must be correct for the LOM
device to preserve time across firmware flashes.