Dell PowerFlex v3.6.x User Roles and LDAP Usage Technical Notes

LDAP login requirements

The following table lists the requirements for logging in to the different PowerFlex components using LDAP user roles:

Table 1. LDAP user roles by componentThis table lists the LDAP user roles required to log in to each of the PowerFlex components:
Component	Requirements
CLI, REST	At least one LDAP service in the system (not necessarily the one you log in with) must be assigned to the Administrator group. CLI and REST command execution will be according to the user role and permissions. Any LDAP user can log in (CLI command execution is according to the user role and permissions).
PowerFlex GUI, PowerFlex plug-in, PowerFlex Installer	Monitor role Additional roles can also be assigned in order to perform operations other than queries, but Monitor role is mandatory.
SRS	BackendConfigure role, Monitor role When performing system registration for SRS, the MDM remote syslog feature is enabled. BackendConfigure user role is required when accessing the MDM which will perform this operation. The MDM local user/LDAP user in the lockbox must be assigned Monitor privileges in addition to BackendConfigure privileges. The BackendConfigure role does not automatically include Monitor privileges.
SNMP	BackendConfigure role, Monitor role The MDM local user/LDAP user in the lockbox must be assigned Monitor privileges in addition to BackendConfigure privileges. The BackendConfigure role does not automatically include Monitor privileges.