Advanced Settings Utility (ASU) command can disable all subsettings for "Custom" authority - IBM iDataPlex dx360 M4 (7912)

Resolving The Problem

Source

RETAIN tip: H205249

Symptom

When creating a new user on the Integrated Management Module II (IMM2) User Accounts web page, setting the user's authority level to Custom requires at least one (1) sub-function to be set to Yes.

Using Advanced Settings Utility (ASU) commands, all sub-functions for the Custom user can be disabled without any warning or error message. After disabling all sub-functions, any attempt to enable a sub-function using ASU commands fails with return error code '21.'

Affected configurations

The system may be any of the following IBM servers:

• iDataPlex dx360 M4 server, type 7912, any model

This tip is not software specific.

This tip is not option specific.

The following system firmware level(s) are affected:

• 1AOO25I (2012/02/16)

Solution

This behavior was corrected in IMM2 firmware version 1.60 Build ID: 1AOO32P.

The file is available by selecting the appropriate Product group, System, Product name, Product machine type, and Operating system on IBM Support's Fix Central web page, at the following URL:

• http://www.ibm.com/support/fixcentral

Workaround

When using the ASU command to disable sub-functions for the Custom user, users should be careful not to disable all of the sub-functions.

Users can set 'IMM.AuthorityLeve._' to 'ReadOnly,' because 'ReadOnly' is the same when all sub-settings are disabled for Custom authority.

Additional information

This symptom occurs because Configure Manager (CMR) allows ASU to disable all sub-settings of Custom 'AuthorityLevel' as initially designed, which makes the 'AuhorityLevel' unrecognized by CMR. As a result, when ASU tries to enable one of the sub-settings, CMR returns the failure.

CMR will be changed to let 'AuthorityLevel' become 'ReadOnly' when users disable all sub-setting for Custom.