Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
You may experience some slow load times, errors, and slight inconsistencies. We ask for your patience as we finalize the launch. Thank you.

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Question UCS User Roles

Hallo

our Company has now UCS in use. We use the UCS Manager 2.2(1c)

I try to prevent User to configure the Service Template while they use the KVM console.

I tried to use the Role read-only but the user can’t restart the maschine.

 

Is it possible to individualize the user roles ?

I try to give the user possibility to handle the server ( Shutdown, Reboot, Boot )

 

regards

Marc

 

  • Unified Computing
4 REPLIES
VIP Red

You can specify your own

You can specify your own specific rule, the privileges which are available and what they mean, can be found in

http://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucsm_privileges/CiscoUCSManager_Privileges_release21.pdf

New Member

But the standard privilegs

But the standard privilegs have too much access to the System.

There is no privilegs to interact only with the hardware.

 

VIP Red

Can you please be more

Can you please be more specific; you don't want users to modify SP Template, and therefore SP as well ?

But you want to eg. reboot, shutdown blades ? which ones ? any, or only the ones your SP is associated to ?

There have been a lot of discussions in the past

https://supportforums.cisco.com/discussion/11234861/restrict-access-blade-kvmkvm-manager#3394031

https://supportforums.cisco.com/discussion/11439271/right-roleprivileges-kvm-access-only-ucs

 

 

New Member

 I don't want, thats users

 

I don't want, thats users can modify my SP Templates or SP.

My users could have access to the KVM and let the server reboot, shutdown or anything else.

I've tried the IPMI Profile but therfore the User had no rights to interact with the server.

Next step i tried to use the user role "Service Profile Ext-Access" but the user had no opportunity to interact with the server.

106
Views
0
Helpful
4
Replies