You can restrict access to a global entitlement based on the Connection Server instance that users initially connect to when they select global entitlements. Restricting access to a global entitlement is optional.

Prerequisites

  • Become familiar with the restricted global entitlements feature. See Restricting Access to Global Entitlements.

  • Become familiar with the lmvutil command authentication options and requirements and verify that you have sufficient privileges to run the lmvutil command. See lmvutil Command Use.

  • Become familiar with the syntax of the lmvutil command --updateGlobalEntitlement and --updateGlobalApplicationEntitlement options. See Modifying a Global Entitlement.

To restrict a global entitlement, you assign one or more tags to your Connection Server instances in Horizon Administrator. Then, when you create or edit the global entitlement, you run the lmvutil command to specify the tags of the Connection Server instances that you want to have access to the global entitlement.

Note:

You cannot use Horizon Administrator to assign tags to a global entitlement.

Procedure

  1. Assign one or more tags to a Connection Server instance.
    1. Log in to Horizon Administrator for the Connection Server instance.
    2. Select View Configuration > Servers.
    3. Click the Connection Servers tag, select the Connection Server instance, and click Edit.
    4. Type one or more tags in the Tags text box.

      Separate multiple tags with a comma or semicolon.

    5. Click OK to save your changes.

    Repeat this step for each Connection Server instance to which you want to assign tags.

  2. Log in to any Connection Server instance in the pod federation and use the lmvutil command to assign one or more tags to the global entitlement.

    To specify multiple tags, type a quoted list of tags separated by commas or semicolons.

    Option

    Action

    Assign one or more tags to an existing global desktop entitlement

    Run the lmvutil command with the --updateGlobalEntitlement and --tags options.

    The following example assigns a single tag named Internal to a global desktop entitlement named Windows 8 Desktop:

    lmvutil --authAs adminEast --authDomain domainEast --authPassword "*" 
    --updateGlobalEntitlement --entitlementName "Windows 8 Desktop" --tags "Internal"

    Assign one or more tags to an existing global application entitlement

    Run the lmvutil command with the --updateGlobalApplicationEntitlement and --tags options.

    The following example assigns a single tag named External to a global application entitlement named Microsoft Office PowerPoint:

    lmvutil --authAs adminEast --authDomain domainEast --authPassword "*" 
    --updateGlobalApplicationEntitlement --entitlementName "Microsoft Office PowerPoint"
    --tags "External"

    Assign one or more tags when you create a new global desktop entitlement

    Run the lmvutil command with the --createGlobalEntitlement and --tags options.

    The following example assigns a single tag named Internal to a global desktop entitlement named Windows 8 desktop:

    lmvutil --authAs adminEast --authDomain domainEast --authPassword "*" 
    --createGlobalEntitlement --entitlementName "Windows 8 Desktop" --tags "Internal"

    Assign one or more tags when you create a new global application entitlement

    Run the lmvutil command with the --createGlobalApplicationEntitlement and --tags options.

    The following example assigns a single tag named External to a global application entitlement named Microsoft Office PowerPoint:

    lmvutil --authAs adminEast --authDomain domainEast --authPassword "*" 
    --createGlobalApplicationEntitlement --entitlementName "Microsoft Office PowerPoint" --tags "External"

    Repeat this step for each global entitlement to which you want to assign tags.