Mapping Directory Service Groups

User Access: Managers: full access; All users: view (read only).

Manager-level users can map directory service groups to predefined groups. This simplifies user configuration on the Service Processor, because it enables you (if you have appropriate access rights) to automatically map users who are members of directory services groups.

The following directory services are supported:

Service	Description
Active Directory Service (ADS)	Microsoft’s directory service.
Network Information Service (NIS)	A UNIX originated solution to directory service.

Refer to Configuring Directory Services for details about configuring these options.

The Directory Service Group Mappings table identifies existing group mappings. This table also provides options for mapping other directory service groups to a Service Processor group. For example, if Directory Services Group 5 is mapped to manager, all members of group 5 are granted manager-level privileges on the Service Processor.

To map directory service groups, follow these steps:

Click Access Control DS Group Mappings from the menu bar.
The current group mappings table displays. Directory services groups are listed alphabetically.
Choose one of the following:

Select the radio button for the mapping you wish to create (monitor, admin, manager).
Select No Mapping to disable access to the Service Processor.
Enter a new group in the text field and select one of the corresponding radio button options to indicate the Service Processor group to which to map the new entry. Select the Verify checkbox to display an error when a new group name cannot be located in the directory service. Otherwise, any string can be added as the new group name without verification.

Click the button.