One key management task in a VMware Horizon environment is to determine who can use Horizon Console and what tasks those users are authorized to perform. With role-based delegated administration, you can selectively assign administrative rights by assigning administrator roles to specific Active Directory users and groups.
Understanding Roles and Privileges Horizon Console is governed by an access control system that consists of administrator roles and privileges. This system is similar to the vCenter Server access control system. Using Access Groups to Delegate Administration of Pools and Farms in Horizon Console Horizon Console . Published desktop pools and application pools inherit their farm's access group. You can create access groups under the root access group to delegate the administration of specific pools or farms to different administrators. Understanding Permissions Horizon Console presents the combination of a role, an administrator user or group, and an access group as a permission. The role defines the actions that can be performed, the user or group indicates who can perform the action, and the access group contains the objects that are the target of the action. Manage Administrators Horizon Console to add and remove administrator users and groups. Manage and Review Permissions Horizon Console to add, delete, and review permissions for specific administrator users and groups, roles, and access groups. Manage and Review Access Groups Horizon Console to add and delete access groups and to review the desktop pools and machines in a particular access group. Manage Custom Roles Horizon Console to add, modify, and delete custom roles. Predefined Roles and Privileges Horizon Console includes predefined roles that you can assign to your administrator users and groups. You can also create your own administrator roles by combining selected privileges. Required Privileges for Common Tasks Best Practices for Administrator Users and Groups VMware Horizon environment, you should follow best practices when managing administrator users and groups.
