You use global entitlements to entitle users and groups to desktops and applications in a Cloud Pod Architecture environment. Global entitlements provide the link between users and their desktops and applications, regardless of where those desktops and applications reside in the pod federation.

About this task

A global entitlement contains a list of member users or groups, a list of the pools that can provide desktops or applications for entitled users, and a set of policies. You can add both users and groups, only users, or only groups, to a global entitlement. You can add a particular pool to only one global entitlement.

Prerequisites

  • Decide which type of global desktop entitlement to create, the users, groups, and pools to include in the global entitlement, and the scope of the global entitlement. See Entitling Users and Groups in the Pod Federation.

  • Decide whether the global entitlement should use home sites. See Using Home Sites.

  • Create the desktop or application pools to include in the global entitlement. For information about creating pools, see the Setting Up Virtual Desktops in Horizon 7 and Setting Up Published Desktops and Applications in Horizon 7 documents.

  • Decide which users and groups to include in the global entitlement.

  • Initialize the Cloud Pod Architecture feature. See Initialize the Cloud Pod Architecture Feature.

Procedure

  1. Log in to the Horizon Administrator user interface for any Connection Server instance in the pod federation.
  2. In Horizon Administrator, select Catalog > Global Entitlements and click Add.
  3. Select the type of global entitlement to add and click Next.

    Option

    Description

    Desktop Entitlement

    Adds a global desktop entitlement.

    Application Entitlement

    Adds a global application entitlement.

  4. Configure the global entitlement.
    1. Type a name for the global entitlement in the Name text box.

      The name can contain between 1 and 64 characters. This is the name that appears in the list of available desktops and applications in Horizon Client for an entitled user.

    2. (Optional) : Type a description of the global entitlement in the Description text box.

      The description can contain between 1 and 1024 characters.

    3. If you are configuring a global desktop entitlement, select a user assignment policy.

      The user assignment policy specifies the type of desktop pool that a global desktop entitlement can contain. You can select only one user assignment policy.

      Option

      Description

      Floating

      Creates a floating desktop entitlement. A floating desktop entitlement can contain only floating desktop pools.

      Dedicated

      Creates a dedicated desktop entitlement. A dedicated desktop entitlement can contain only dedicated desktop pools.

    4. Select a scope policy for the global entitlement.

      The scope policy specifies where to look for desktops or applications to satisfy a request from the global entitlement. You can select only one scope policy.

      Option

      Description

      All sites

      Look for desktops or applications on any pod in the pod federation.

      Within site

      Look for desktops or applications only on pods in the same site as the pod to which the user is connected.

      Within pod

      Look for desktops or applications only in the pod to which the user is connected.

    5. (Optional) : If users have home sites, configure a home site policy for the global entitlement.

      Option

      Description

      Use home site

      Begin searching for desktops or applications in the user's home site. If the user does not have a home site and the Entitled user must have home site option is not selected, the site to which the user is currently connected is assumed to be the home site.

      Entitled user must have home site

      Make the global entitlement available only if the user has a home site. This option is available only when the Use home site option is selected.

    6. (Optional) : Use the Automatically clean up redundant sessions option to specify whether to automatically clean up redundant sessions.
      Note:

      This option is available only for floating desktop entitlements and global application entitlements.

      Multiple sessions can occur when a pod that contains a session goes offline, the user logs in again and starts another session, and the problem pod comes back online with the original session. When multiple sessions occur, Horizon Client prompts the user to select a session. This option determines what happens to sessions that the user does not select. If you do not select this option, users must manually end their own extra sessions, either by logging off in Horizon Client or by launching the sessions and logging them off.

    7. Select the default display protocol for desktops or applications in the global entitlement and specify whether to allow users to override the default display protocol.
    8. If you are configuring a global desktop entitlement, select whether to allow users to reset desktops in the global desktop entitlement.
    9. Select whether to allow users to use the HTML Access feature to access desktops or applications in the global entitlement.

      With HTML Access, end users can use a Web browser to connect to remote desktops and applications and are not required to install any client software on their local systems.

    10. Select whether to allow users to initiate separate desktop sessions from different client devices (multiple sessions per user policy).

      If you enable this setting, users that connect to the global entitlement from different client devices receive different desktop sessions. To reconnect to an existing desktop session, users must use the same device from which that session was initiated. If you do not enable this setting, users are always reconnected to their existing desktop sessions, regardless of the client device that they use. You can enable this setting only for floating desktop entitlements.

      Note:

      If you enable this setting, all of the desktop pools in the global entitlement must also support multiple sessions per user.

  5. Click Next and add users or groups to the global entitlement.
    1. Click Add, select one or more search criteria, and click Find to filter users or groups based on your search criteria.

      You can select the Unauthenticated Users check box to find and add unauthenticated access users to global application entitlements. You cannot add unauthenticated access users to global desktop entitlements. If you attempt to add an unauthenticated access user to a global desktop entitlement, Horizon Administrator returns an error message.

    2. Select the user or group to add to the global entitlement and click OK.

      You can press the Ctrl and Shift keys to select multiple users and groups.

  6. Click Next, review the global entitlement configuration, and click Finish to create the global entitlement.

    The global entitlement appears on the Global Entitlements page.

  7. Select the pools that can provide desktops or applications for the users in the global entitlement you created.
    1. Log in to the Horizon Administrator user interface for any Connection Server instance in the pod that contains the pool to add to the global entitlement.
    2. In Horizon Administrator, select Catalog > Global Entitlements.
    3. Double-click the global entitlement.
    4. On the Local Pools tab, click Add, select the pools to add, and click Add.

      You can press the Ctrl and Shift keys to select multiple pools.

      Pools that are already associated with a global entitlement, or that do not meet the criteria for the policies you selected for the global entitlement, are not displayed. For example, if you enabled the HTML Access policy, you cannot select pools that do not allow HTML Access.

      Important:

      If you add multiple application pools to a global application entitlement, you must add the same application. For example, do not add Calculator and Microsoft Office PowerPoint to the same global application entitlement. If you add different applications to the same global application entitlement, entitled users might receive different applications at different times.

    5. Repeat these steps on a Connection Server instance in each pod that contains a pool to add to the global entitlement.

Results

The Cloud Pod Architecture feature stores the global entitlement in the Global Data Layer, which replicates the global entitlement on every pod in the pod federation. When an entitled user uses Horizon Client to connect to a Connection Server instance in the pod federation, the global entitlement name appears in the list of available desktops and applications.

Note:

If a Horizon administrator changes the pool-level display protocol or protocol override policy after a desktop pool is associated with a global desktop entitlement, users can receive a desktop launch error when they select the global desktop entitlement. If a Horizon administrator changes the pool-level virtual machine reset policy after a desktop pool is associated with the global desktop entitlement, users can receive an error if they try to reset the desktop.

What to do next

Assign tags to the global entitlement to restrict access to particular Connection Server instances. See Restrict Access to a Global Entitlement.