Integrated Dell Remote Access Controller 9 Version 3.21.21.21 User's Guide

Best practices for extended schema

The extended schema uses Dell association objects to join iDRAC and permission. This allows you to use iDRAC based on the overall permissions granted. The default Access Control List (ACL) of Dell Association objects allows Self and Domain Administrators to manage the permissions and scope of iDRAC objects.

By default, the Dell Association objects do not inherit all permissions from the parent Active Directory objects. If you enable inheritance for the Dell Association object, the inherited permissions for that association object are granted to the selected users and groups. This may result in unintended privileges being provided to the iDRAC.

To use the Extended Schema securely, Dell recommends not enabling inheritance on Dell Association objects within the extended schema implementation.