RBAC and Sub-Orgs

[Terry MacDougal]

We currectly have AD setup to authenticate users. I have a question regarding Sub-Orgs.

We have multiple sub-orgs (A, B and C) with various server pools. I would like to give the user bob console access to servers in the B sub-org only and Chris access to servers in the A sub-org only. Is this possible?

Thanks

[padramas]

Hello Terry,

Yes, it is possible. You need to map the user role to locale ( that has list of orgs ) and grant only the required privileges.

http://www.cisco.com/en/US/docs/unified_computing/ucs/ucsm_privileges/CiscoUCSManager_Privileges_release21.html

http://www.cisco.com/en/US/docs/unified_computing/ucs/sw/gui/config/guide/2.1/b_UCSM_GUI_Configuration_Guide_2_1_chapter_01010.html

Padma

[Terry MacDougal]

It does work as described above, however, can these special users only access the console via the web interface and not UCSM? Basically I don't want them to see the configs in UCSM??? And/or can we hide the other orgs at best????

Thanks