You must set up system and database accounts to administer Horizon 8 components.
Horizon 8 System Accounts
| Horizon 8 Component | Required Accounts |
|---|---|
| Horizon Client | Configure user accounts in Active Directory for the users who have access to remote desktops and applications. The user accounts must be members of the Remote Desktop Users group, but the accounts do not require Horizon administrator privileges. |
| vCenter Server | Configure a user account in Active Directory with permission to perform the operations in vCenter Server that are necessary to support Horizon 8. For information about the required privileges, see the Horizon 8 Installation and Upgrade guide. |
| Connection broker | When you install Horizon 8, you can specify a specific domain user, the local Administrators group, or a specific domain user group as Horizon administrators. We recommend creating a dedicated domain user group of Horizon administrators. The default is the currently logged in domain user. In the Horizon Console, you can use Settings > Administrators to change the list of Horizon administrators. See the Horizon 8 Administration guide. |
Horizon 8 Database Accounts
| Horizon 8 Component | Required Accounts |
|---|---|
| Event database used by the connection broker | A Microsoft SQL Server, Oracle, or PostgreSQL database stores Horizon 8 event data. You create an administrative account for the database that the Horizon Console can use to access the event data. |
To reduce the risk of security vulnerabilities, take the following actions:
- Configure Horizon 8 databases on servers that are separate from other database servers that your organization uses.
- Do not allow a single user account to access multiple databases.
- Configure a separate account for access to the event database.
Was this page helpful?