Required Privileges for Common Tasks

Many common administration tasks require a coordinated set of privileges. Some operations require permission at the root access group, or at the federation root access group in a Cloud Pod Architecture environment, in addition to access to the object that is being manipulated. The topics below describe the specific privileges required for each category of administrative task in Horizon 8.

• Managing Pools and Farms: Describes the privileges required to create, modify, and delete desktop pools and farms in Horizon Console.

• Privileges for Managing Machines: Lists the privileges required to perform machine management tasks such as adding, removing, and maintaining virtual machines in a Horizon deployment.

• Privileges for Managing Users and Administrators: Describes the privileges required to manage Horizon user entitlements and administrator accounts and roles.

• Privileges for Managing a Cloud Pod Architecture Environment: Lists the privileges required to configure and manage a Cloud Pod Architecture (CPA) environment, including federation access group permissions.

• Privileges for Managing Access Groups and Federation Access Groups: Describes the privileges required to create, modify, and delete access groups and federation access groups used to delegate administrative control.

• Privileges for Managing Sessions and Global Sessions: Lists the privileges required to view, manage, and terminate user sessions, including global sessions across a Cloud Pod Architecture environment.

• Privileges for Horizon Help Desk Tool Tasks: Describes the privileges required to use the Horizon Help Desk Tool to assist end users with session and connection issues.

• Privileges and Roles for General Administration Tasks and Commands: Lists the privileges and roles required for general Horizon administration tasks, including command-line operations and console-based management activities.