You can specify which users can log into a host that is lockdown mode. DCUI Access users do not need to have full administrative privileges on the host. You grant the DCUI Access privilege in Advanced Settings in the vSphere Web Client.

About this task

In versions of vSphere earlier than vSphere 5.1, the root user can log into the DCUI on a host that is in lockdown mode. In vSphere 5.1, you can specify which local ESXi users are allowed to log in to the DCUI when the host is in lockdown mode. These special users do not need to have full administrative privileges on the host. Specifying users other than the anonymous root user allows you to log which users have performed operations on the host while it is in lockdown mode.

Important:

When you disable lockdown mode using the DCUI, all users with the DCUI Access privilege are granted the Administrator role on the host.

Procedure

  1. Browse to the host in the vSphere Web Client object navigator.
  2. Click the Manage tab and select Settings.
  3. Click Advanced System Settings and select the setting DCUI.Access.
  4. Click Edit and enter the user names, separated by commas.

    By default, the root user is specified. You can remove root from the list of DCUI access users, as long as you specified at least one other user.

  5. Click OK.