Manage Administrators

Users who have the Manage Roles and Permissions privilege can use Omnissa Horizon Console to add and remove administrator users and groups.

The Administrators role is the most powerful role in Horizon Console. Initially, members of the Administrators account are given the Administrators role. You specify the Administrators account when you install Omnissa Horizon Connection Server. The Administrators account can be the local Administrators group (BUILTIN\Administrators) on the Horizon Connection Server computer or a domain user or group account.

Note: By default, the Domain Admins group is a member of the local Administrators group. If you specified the Administrators account as the local Administrators group, and you do not want domain administrators to have full access to inventory objects and Omnissa Horizon configuration settings, you must remove the Domain Admins group from the local Administrators group.

Configuring Role-Based Delegated AdministrationOne key management task in an Omnissa Horizon environment is to determine who can use Horizon Console and what tasks those users are authorized to perform. With role-based delegated administration, you can selectively assign administrative rights by assigning administrator roles to specific Active Directory users and groups. Create an Administrator in Horizon ConsoleTo create an administrator, you select a user or group from your Active Directory users and groups in Horizon Console and assign an administrator role. Remove an Administrator in Horizon ConsoleYou can remove an administrator user or group.