Question UCS User Roles

[MarcST1984]

Hallo

our Company has now UCS in use. We use the UCS Manager 2.2(1c)

I try to prevent User to configure the Service Template while they use the KVM console.

I tried to use the Role read-only but the user can’t restart the maschine.

Is it possible to individualize the user roles ?

I try to give the user possibility to handle the server ( Shutdown, Reboot, Boot )

regards

Marc

[Walter Dey]

You can specify your own specific rule, the privileges which are available and what they mean, can be found in

http://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucsm_privileges/CiscoUCSManager_Privileges_release21.pdf

[MarcST1984]

But the standard privilegs have too much access to the System.

There is no privilegs to interact only with the hardware.

[Walter Dey]

Can you please be more specific; you don't want users to modify SP Template, and therefore SP as well ?

But you want to eg. reboot, shutdown blades ? which ones ? any, or only the ones your SP is associated to ?

There have been a lot of discussions in the past

https://supportforums.cisco.com/discussion/11234861/restrict-access-blade-kvmkvm-manager#3394031

https://supportforums.cisco.com/discussion/11439271/right-roleprivileges-kvm-access-only-ucs

[MarcST1984]

I don't want, thats users can modify my SP Templates or SP.

My users could have access to the KVM and let the server reboot, shutdown or anything else.

I've tried the IPMI Profile but therfore the User had no rights to interact with the server.

Next step i tried to use the user role "Service Profile Ext-Access" but the user had no opportunity to interact with the server.