You must set up system and database accounts to administer VMware Horizon 8 components.

Table 1. Horizon 8 System Accounts
Horizon 8 Component Required Accounts
Horizon Client

Configure user accounts in Active Directory for the users who have access to remote desktops and applications. The user accounts must be members of the Remote Desktop Users group, but the accounts do not require Horizon administrator privileges.

vCenter Server

Configure a user account in Active Directory with permission to perform the operations in vCenter Server that are necessary to support VMware Horizon 8.

For information about the required privileges, see the Horizon 8 Installation and Upgrade document.

Connection broker

When you install VMware Horizon 8, you can specify a specific domain user, the local Administrators group, or a specific domain user group as Horizon administrators. We recommend creating a dedicated domain user group of Horizon administrators. The default is the currently logged in domain user.

In the Horizon Console, you can use Settings > Administrators to change the list of Horizon administrators.

See the Horizon 8 Administration document for information about the privileges that are required.

Table 2. Horizon 8 Database Accounts
Horizon 8 Component Required Accounts
Event database used by the connection broker

A Microsoft SQL Server, Oracle, or PostgreSQL database stores Horizon 8 event data. You create an administrative account for the database that the Horizon Console can use to access the event data.

To reduce the risk of security vulnerabilities, take the following actions:

  • Configure VMware Horizon 8 databases on servers that are separate from other database servers that your organization uses.
  • Do not allow a single user account to access multiple databases.
  • Configure a separate account for access to the event database.