Security Considerations for Cloud Pod Architecture

To use Horizon Console or lmvutil commands to configure and manage a Cloud Pod Architecture environment, you must have certain roles or privileges.

To access the following pages and tabs in Horizon Console, you must have the Administrators (Read only) role on the root access group, or, at a minimum, the Manage Cloud Pod Architecture privilege:

• Cloud Pod Architecture and Sites pages in Settings
• Global Entitlements page in Inventory
• Home Site Assignment and Home Site Resolution tabs on the Users and Groups page

To perform operations on the following pages and tabs in Horizon Console, you must have the Administrators role on the root access group, or, at a minimum, the Manage Cloud Pod Architecture privilege:

• Cloud Pod Architecture and Sites pages in Settings
• Global Entitlements page in Inventory
• Home Site Assignment tab on the Users and Groups page

If you can access the Home Site Resolution tab, you can also look up the home site resolution for a user. No additional privileges are required.

To join an active pod federation on pod Y from pod X, you must have the credentials of the administrator that installed Connection Server Y. The credentials of an administrator with only the Manage Cloud Pod Architecture privilege on pod Y are not sufficient to perform this action.

For complete information about permissions, privileges, and roles, see the Horizon Administration document.