Manage Administrators

Users who have the Manage Roles and Permissions privilege can use Horizon Console to add and remove administrator users and groups.

The Administrators role is the most powerful role in Horizon Console. Initially, members of the Administrators account are given the Administrators role. You specify the Administrators account when you install Connection Server. The Administrators account can be the local Administrators group (BUILTIN\Administrators) on the Connection Server computer or a domain user or group account.

Note: By default, the Domain Admins group is a member of the local Administrators group. If you specified the Administrators account as the local Administrators group, and you do not want domain administrators to have full access to inventory objects and VMware Horizon configuration settings, you must remove the Domain Admins group from the local Administrators group.