Role access restrictions limit an authenticated user's ability to receive iLO 2 MP privileges based on rights specified in one or more roles.

Figure 7-24shows the user and role access restrictions.

Figure 7-24 User and Role Access Restrictions

How User Time Restrictions Are Enforced

You can place a time restriction on directory user accounts. Time restrictions limit the ability of the user to log in (authenticate) to the directory. Typically, time restrictions are enforced using the time on the directory server, but if the directory server is located in a different time zones or a replica in a different time zone is accessed, time zone information from the managed object can be used to adjust for relative time.

While directory server evaluates user time restrictions, the determination can be complicated by time zone changes or by the authentication mechanism.

Figure 7-25shows the user time restrictions.

Directory-Enabled Remote Management 177

Page 177
Image 177
HP Integrity iLO 2 MP 5991-6005 How User Time Restrictions Are Enforced, 24shows the user and role access restrictions