An administrator must have certain privileges to perform general administration tasks and run command line utilities.

Table 1 shows the privileges that are required to perform general administration tasks and run command line utilities.

Table 1. Privileges for General Administration Tasks and Commands
Task Required Privileges
Add or delete an access group Must have the Administrators role on the root access group.
Manage ThinApp applications and settings in View Administrator Must have the Administrators role on the root access group.
Install Horizon Agent on an unmanaged machine, such as a physical system, standalone virtual machine, or RDS host Register Agent
View or modify configuration settings (except for administrators) in View Administrator Manage Global Configuration and Policies
Run all PowerShell commands and command line utilities except for vdmadmin and vdmimport. Direct Interaction
Use the vdmadmin and vdmimport commands Must have the Administrators role on the root access group.
Use the vdmexport command Must have the Administrators role or the Administrators (Read only) role on the root access group.