Disable HPE OneView access to server ILO

[Raieno]

Is there is a way to disable ILO access via HPE OneView?

like completely stop HPE OneView from reaching ILO web interface and HTML5?

What we like to have is to only allow user to access OneView to monitor server status but have no access to server ILO. We do understand that by disabling SSO on the servers, we can stop the user from accessing the servers and display a login page. But we what we want is to stop user from even reaching that login page.

[DanCernese]

This really isn't an HPE OneView feature; a user will always be able to reach the IP address of the iLO.

The iLO itself has a setting (under Security) to disable the web interface.  ...however, you really should plan how you're going to perhaps any necessary recovery or maintenance without it.  (I'm not an iLO expert!)

Although you may achieve something close to what you want if you define a scope and a read-only access to that scope and does not include the resources you don't want them to have access to.

[TKop]

The only thing OV has that is close to this is the read only role.  A user with that role in OV cannot perform any actions.  However, they can still SSO to the iLO.  But, the SSO to the iLO is using the iLO "user" privileges and thus on the iLO, they cannot perform actions there either.  Not what you specifically wanted but thought I'd pass along.

[ChrisLynch]

As Dan and Toran have both said, this isn't possible.  Why would you need to restrict access to the iLO UI for certain users?