You use global entitlements to entitle users and groups to desktops and applications in a Cloud Pod Architecture environment. Global entitlements provide the link between users and their desktops and applications, regardless of where those desktops and applications reside in the pod federation.

About this task

A global entitlement contains a list of member users or groups, a set of policies, and a list of the pools that can provide desktops or applications for entitled users. You can add both users and groups, only users, or only groups, to a global entitlement.

Prerequisites

Procedure

  1. Log in to the Horizon Administrator user interface for any Connection Server instance in the pod federation.
  2. In Horizon Administrator, select Catalog > Global Entitlements and click Add.
  3. Select the type of global entitlement to add and click Next.

    Option

    Description

    Desktop Entitlement

    Adds a global desktop entitlement.

    Application Entitlement

    Adds a global application entitlement.

  4. Configure the global entitlement.
    1. Type a name for the global entitlement in the Name text box.

      The name can contain between 1 and 64 characters. This name appears in the list of available desktops and applications in Horizon Client for an entitled user.

    2. (Optional) : Type a description of the global entitlement in the Description text box.

      The description can contain between 1 and 1024 characters.

    3. (Optional) : To restrict access to the global entitlement, click the Connection Server restrictions Browse button, select Restricted to these tags, select the tags to associate with the global entitlement, and click OK.

      Only the Connection Server instances that have the selected tags can access the global entitlement.

      Note:

      You can only select tags assigned to Connection Server instances in the local pod. To select tags assigned to Connection Server instances in another pod, you must log in to Horizon Administrator for a Connection Server instance in the other pod and modify the global entitlement.

    4. (Optional) : To create a Windows Start menu shortcut for the global entitlement, click the Category Folder Browse button, select Select a category folder from the folder list, select a category folder from the list, and click OK.

      You can create a new category folder by typing a folder name in the New Folder text box and clicking Add.

    5. (Global desktop entitlement only) Select a user assignment policy.

      The user assignment policy specifies the type of desktop pool that a global desktop entitlement can contain. You can select only one user assignment policy.

      Option

      Description

      Floating

      Creates a floating desktop entitlement. A floating desktop entitlement can contain only floating desktop pools.

      Dedicated

      Creates a dedicated desktop entitlement. A dedicated desktop entitlement can contain only dedicated desktop pools.

    6. Select a scope policy for the global entitlement.

      The scope policy specifies where to look for desktops or applications to satisfy a request from the global entitlement. You can select only one scope policy.

      Option

      Description

      All sites

      Look for desktops or applications on any pod in the pod federation.

      Within site

      Look for desktops or applications only on pods in the same site as the pod to which the user is connected.

      Within pod

      Look for desktops or applications only in the pod to which the user is connected.

    7. (Optional) : If users have home sites, configure a home site policy for the global entitlement.

      Option

      Description

      Use home site

      Begin searching for desktops or applications in the user's home site. If the user does not have a home site and the Entitled user must have home site option is not selected, the site to which the user is connected is assumed to be the home site.

      Entitled user must have home site

      Make the global entitlement available only if the user has a home site. This option is available only when the Use home site option is selected.

    8. (Optional) : Use the Automatically clean up redundant sessions option to specify whether to clean up redundant sessions.
      Note:

      This option is available only for floating desktop entitlements and global application entitlements.

      Multiple sessions can occur when a pod that contains a session goes offline, the user logs in again and starts another session, and the problem pod comes back online with the original session. When multiple sessions occur, Horizon Client prompts the user to select a session. This option determines what happens to sessions that the user does not select. If you do not select this option, users must manually end their own extra sessions, either by logging off in Horizon Client or by launching the sessions and logging them off.

    9. Select the default display protocol for desktops or applications in the global entitlement and specify whether to allow users to override the default display protocol.
    10. (Global desktop entitlement only) Select whether to allow users to reset desktops in the global desktop entitlement.
    11. Select whether to allow users to use the HTML Access feature to access desktops or applications in the global entitlement.

      When you enable the HTML Access policy, end users can use a Web browser to connect to remote desktops and applications and are not required to install any client software on their local systems.

    12. (Global desktop entitlement only) Select whether to allow users to initiate separate desktop sessions from different client devices.

      When you enable the multiple sessions per user policy, users that connect to the global entitlement from different client devices receive different desktop sessions. To reconnect to an existing desktop session, users must use the same device from which that session was initiated. If you do not enable this policy, users are always reconnected to their existing desktop sessions, regardless of the client device that they use. You can enable this policy only for floating desktop entitlements.

      Note:

      If you enable this policy, all the desktop pools in the global entitlement must also support multiple sessions per user.

    13. Select whether to restrict access to the global entitlement to specific client computers.

      You must add the names of the computers that are allowed to access the global entitlement in an Active Directory security group. You can select this security group when you add users or groups to the global entitlement.

      Note:

      You can enable this policy only for floating desktop entitlements and global application entitlements.

    14. (Global application entitlement only) Select whether to launch the application session before a user opens the global application entitlement in Horizon Client.

      When you enable the pre-launch policy, users can launch the global application entitlement more quickly.

      Note:

      If you enable this policy, all the application pools in the global application entitlement must also support the session pre-launch feature, and the pre-launch session timeout must be the same for all farms.

  5. Click Next and add users or groups to the global entitlement.
    1. Click Add, select one or more search criteria, and click Find to filter users or groups based on your search criteria.

      You can select the Unauthenticated Users check box to find and add unauthenticated access users to global application entitlements. You cannot add unauthenticated access users to global desktop entitlements. If you attempt to add an unauthenticated access user to a global desktop entitlement, Horizon Administrator returns an error message.

    2. Select the user or group to add to the global entitlement and click OK.

      To restrict access to the global entitlement to specific client computers, select the Active Directory security group that contains the names of the computers that are allowed to access the global entitlement.

      You can press the Ctrl and Shift keys to select multiple users and groups.

  6. Click Next, review the global entitlement configuration, and click Finish to create the global entitlement.

    The global entitlement appears on the Global Entitlements page.

Results

The Cloud Pod Architecture feature stores the global entitlement in the Global Data Layer, which replicates the global entitlement on every pod in the pod federation.

What to do next

Select the pools that can provide desktops or applications for the users in the global entitlement that you created. See Add a Pool to a Global Entitlement.