Privileges for Managing Sessions and Global Sessions

Certain privileges are required to view sessions and global sessions in Horizon Console.

The following table describes the privileges required for each type of session.

Session Type	Session Description	Required Privileges
SA	Sessions that are hosted on a resource not used in a pod federation in a Cloud Pod Architecture environment.	Any privilege that has the Access group, Local pod, or All scope on the desktop pool or farm’s access group.
SB	Sessions that are hosted on a local pod cluster resource but are served from a pod federation in a Cloud Pod Architecture environment.	Any privilege that has the Access group, Local pod, or All scope on the desktop pool or farm's access group, or Manage Global Sessions or Manage Help Desk (Read only) on the global entitlement's access group.
SC	Sessions that are hosted on a remote pod cluster resource but are served from a pod federation in a Cloud Pod Architecture environment.	Manage Global Sessions or Manage Help Desk (Read only) on the global entitlement's access group.

SA and SB type sessions are listed on session pages other than Search Sessions in Horizon Console. The following table describes the privileges required to manage sessions on those pages.

Operation	Required Privileges
Send message	Manage Sessions on the desktop pool or farm's access group.
Disconnect	Manage Sessions on the desktop pool or farm's access group.
Logoff	Manage Sessions on the desktop pool or farm's access group.
Restart desktop	Manage Reboot Operation on the desktop pool or farm's access group.
Reset virtual machine	Manage Reboot Operation on the desktop pool or farm's access group.

All types of sessions are listed on the Search Sessions page in Horizon Console. The following table describes the privileges required to manage these sessions.

Session Type	Operations	Required Privileges
SA	Send message, disconnect,log off	Manage Sessions on the desktop pool or farm's access group.
SA	Restart desktop, reset virtual machine	Manage Reboot Operation on the desktop pool or farm's access group.
SB	Send message, disconnect, log off	Manage Global Sessions on the federation access group of any of the global entitlements for the session, or Manage Sessions on the desktop pool or farm's access group.
SB	Restart desktop, reset virtual machine	Manage Global Sessions on the federation access group of any of the global entitlements for the session, or Manage Reboot Operation on the desktop pool or farm's access group.
SC	Any operation	Manage Global Sessions on the federation access group of any of the global entitlements for the session.