Using onecommand manager for vmware vcenter, Active directory, Lockdown mode feature – Dell Emulex Family of Adapters User Manual
Page 1177: Using onecommand manager for vmware vcenter 7

OneCommand Manager for VMware vCenter Version 10.2 User Manual
P010089-01A Rev. A
3. Using OneCommand Manager for VMware vCenter
Behavior of OneCommand Manager for VMware vCenter Settings in the ESXi Server
1177
3. Using OneCommand Manager for VMware
vCenter
Behavior of OneCommand Manager for VMware
vCenter Settings in the ESXi Server
Active Directory
Refer to the vSphere manual on the VMware website for information on creating a user
with required privileges and changing access permissions for a user in the Active
Directory.
Privileges for OneCommand Manager for VMware vCenter
Only a user with these specific privileges can read and perform active management in
OneCommand Manager for VMware vCenter:
“Host.CIM.CIM Interaction” to read and manage data through the
OneCommand Manager for VMware vCenter
“Extension.Register extension” to register OneCommand Manager for VMware
vCenter using the registration utility
“Extension.Unregister extension” to unregister OneCommand Manager for
VMware vCenter using the registration utility
All other users including the root user of the ESXi host cannot perform any actions
including reading data. If a user without the required privileges attempts to perform
any action in OneCommand Manager for VMware vCenter, an error message is
displayed.
Note: To configure user roles and assign privileges, refer to the VMware vCenter Server
Manual.
Lockdown Mode Feature
Refer to the vSphere manual on the VMware website for information on enabling and
disabling lockdown mode.
If lockdown mode is enabled for an ESXi host, then only a user with the required
privileges can access the ESXi host and manage adapters using OneCommand Manager
for VMware vCenter. All other users including the root user will not have access to the
ESXi host.