Cisco Systems UCSCPCIEBTG, 57712 manual Set group-auth, Scope role-group, Admin user readonly

Managing User Accounts

Configuring Active Directory Groups in CIMC

Procedure

	Command or Action		Purpose
Step 1	Server# scope ldap		Enters the LDAP command mode for AD configuration.
Step 2	Server /ldap #	set group-auth	Enables or disables AD group authorization.
	{yes no}
Step 3	Server /ldap #	scope role-group	Selects one of the five available group profiles for
	index		configuration, where index is a number between 1 and 5.
Step 4	Server /ldap/role-group # set name Specifies the name of the group in the AD database that is
	group-name		authorized to access the server.
Step 5	Server /ldap/role-group # set		Specifies the AD domain the group must reside in.
	domain domain-name
Step 6	Server /ldap/role-group # set role		Specifies the permission level (role) assigned to all users in
	{admin user readonly}		this AD group. This can be one of the following:
			• admin—The user can perform all actions available.
			• user—The user can perform the following tasks:
			◦View all information
			◦Manage the power control options such as power
			on, power cycle, and power off
			◦Launch the KVM console and virtual media
			◦Clear all logs
			◦Toggle the locator LED
			• readonly—The user can view information but cannot
			make any changes.
Step 7	Server /ldap/role-group # commit Commits the transaction to the system configuration.

This example shows how to configure AD group authorization:

Server# scope ldap
Server	/ldap # set group-auth yes
Server	/ldap *# scope role-group 5
Server	/ldap/role-group *# set name Training
Server	/ldap/role-group *# set domain example.com
Server	/ldap/role-group *# set role readonly
Server	/ldap/role-group *# commit
ucs-c250-M2 /ldap # show role-group			Role
Group	Name	Domain
------	----------------	----------------	--------
1	(n/a)	(n/a)	admin
2	(n/a)	(n/a)	user
3	(n/a)	(n/a)	readonly
4	(n/a)	(n/a)	(n/a)
5	Training	example.com	readonly

	Cisco UCS C-Series Servers Integrated Management Controller CLI Configuration Guide, Release 1.5
70	OL-28893-01