Due to recent security breaches and to avoid accidental changes made by the junior IT...

To prevent unwanted configuration changes in the iDRAC UI, you can adjust user roles, permissions, or enable specific security settings to restrict access for junior IT staff. Here are the steps to secure the iDRAC configuration:

Step-by-Step Guide:

Access User Settings:

In the iDRAC interface, navigate to iDRAC Settings from the main menu.

Choose User Authentication or Users to manage user accounts and permissions.

Adjust User Roles and Permissions:

Identify the accounts associated with junior IT staff.

For each user account, adjust the role to Read-Only if you want them to have view-only access without making configuration changes.

Alternatively, set their permissions to exclude configuration changes. This may involve assigning a custom role with limited access based on your needs.

Enable Configuration Lock (if available):

Some versions of iDRAC offer a Configuration Lock feature, which prevents any configuration changes until the lock is removed by an administrator.

Navigate to Configuration > System Security or User Authentication, depending on the version, and enable the Configuration Lock option.

Set Up Two-Factor Authentication (Optional):

For added security, enable Two-Factor Authentication under iDRAC Settings > Network or Security settings. This step ensures only authorized users can access and make changes to the iDRAC UI.

Save and Apply Security Changes:

After setting up the desired restrictions and permissions, save the settings to apply the changes.

Verify that junior IT staff accounts now have restricted access and cannot make configuration changes.

Log Out and Test the Changes:

Log out of the administrator account and log in with a junior IT staff account to confirm that the permissions are set correctly.

Ensure that configuration changes are disabled and that the user can only view the iDRAC interface as per the restrictions.

By following these steps, you can restrict junior IT staff from making any configuration changes within the iDRAC interface, thus preventing accidental or unauthorized modifications.