HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
ProLiant Servers (ML,DL,SL)
Showing results for 
Search instead for 
Did you mean: 

iLO 5 LDAP add DirectoryGroup with Powershell/Redfish

Go to solution
Occasional Collector

iLO 5 LDAP add DirectoryGroup with Powershell/Redfish

Helo Everyone

With iLO5 some new privileges for DirectoryGroups. I know from the this disscusion (https://community.hpe.com/t5/ProLiant-Servers-ML-DL-SL/iLO-5-LDAP-group-permissions-using-PowerShell/td-p/6994601), that the ilo Powershell Modul 2.0 can't add Directory Groups with all permissions. But is there any way, to do that over the Redfish interface? I looked for it on diffrent sites and could't find anything.
This is my first pose so sorry if i did somthing wrong :).

Thanks for your help.



Re: iLO 5 LDAP add DirectoryGroup with Powershell/Redfish

HPE redfish schema is expanding for managing iLO5 extensively, but for this specific query per my research and insight, we still need to wait for future snaps of Gen10 to script all of them.

Untill then it can be achieved by following manuall p

1. Click Administration in the navigation tree, and then click the Directory Groups tab. 2. Click New. 3. Provide the following details in the Group Information section: • Group DN • Group SID (Kerberos authentication and Active Directory integration only) 4. Select from the following privileges: • Login • Remote Console • Virtual Power and Reset • Virtual Media • Host BIOS • Configure iLO Settings • Administer User Accounts • Host NIC • Host Storage • Recovery Set 5. To save the new directory group, click Add Group.

Refer: https://support.hpe.com/hpsc/doc/public/display?docId=a00026409en_us


I am HPE Employee

If it resolves the issue, please like and consider marking it as an Accepted Solution.

The comments in this post are my own and do not represent an official reply from the company.

Re: iLO 5 LDAP add DirectoryGroup with Powershell/Redfish


is there a solution planned? We set a lot of configurations of iLO boards automatically using the iLO scripting tools, but we cannot use the new and more granular settings from the iLO5 without a working cmdlet for the directory settings.




Trusted Contributor

Re: iLO 5 LDAP add DirectoryGroup with Powershell/Redfish

Hi Tom,

I am afraid that you can't do automation through iLO Scripting cmdlets for iLO5 servers.

But its true that ilo cmdlets 2.0.x version is currently does not support all permissions of directory support functionality because of iLO5 not exposing required REST interfaces. The plan is to have these interfaces coming in 1HCY19 and after that we will follow up release from iLO cmdlets to support it.



Don't forget to give Kudos if the problem got resolved or like suggestion.