Horizon Help Desk Tool administrators must have certain privileges to perform troubleshooting tasks in Horizon Console.

The following table lists common tasks that the Horizon Help Desk Tool administrator can perform and shows the privileges to perform each task.
Note: The Horizon Help Desk Tool supports federation access groups based on the delegation of administration, but not access group-based delegation of administration. To access the Horizon Help Desk Tool, you must have the Manage Help Desk (Read Only) privilege on the root access group and any federation access group.
Table 1. Horizon Help Desk Tool Tasks and Privileges
Tasks Required Privileges
Read-only access to Horizon Help Desk Tool. Manage Help Desk (Read Only) on the root access group.
Manage global sessions. Manage Global Sessions must be present on any of the federation access groups of the global entitlements on which the global session exists.
Can log in to Horizon Console. Console Interaction
Note:

Console Interaction is added to new roles automatically and does not appear in the list of global privileges in Horizon Console.
Perform all machine and session-related commands on sessions served from desktop or application pools of the local pod cluster. Manage Machine on the root access group.
Send message, disconnect, and log off sessions that are served from desktop or application pools of the local pod cluster. Manage Sessions on the root access group.
Send message, disconnect, and log off operations for global sessions. Manage Global Sessions must be present on any of the federation access groups of the global entitlements on which the global session exists. If the session is hosted on a desktop pool or farm from a local pod cluster, even if it is being served by a global entitlement, the operation is permitted if the administrator has Manage Sessions on root access group.
Restart and reset operations for global sessions. Manage Global Sessions must be present on any of the federation access group of the global entitlements on which the global session exists. If the session is hosted on a desktop pool or farm from a local pod cluster, even if it is being served by a global entitlement, the operation is permitted if the administrator has Manage Reboot Operation on the root access group.
Reset and restart operations for local sessions. Manage Reboot Operation on the root access group.
Remote assistance operations. Remote Assistance on the root access group.
End remote processes and applications. Manage Remote Processes and Applications on the root access group.
Perform all tasks in Horizon Help Desk Tool. Manage Global Sessions on the root federation access group. If the local pod is not part of a pod federation, the administrator must have Manage Global Sessions on the root access group. In addition, the administrator must have Manage Reboot Operation, Manage Sessions, Remote Assistance, and Manage Remote Processes and Applications on the root access group.
Remote assistance operations and end remote processes and applications. Manage Help Desk (Read Only), Remote Assistance, and Manage Remote Processes and Applications