Predefined Roles and Privileges

Horizon Console includes predefined roles that you can assign to your administrator users and groups. You can also create your own administrator roles by combining selected privileges. Understanding the available predefined roles, the scope of individual privileges, and how they interact is essential for implementing a secure and well-structured delegation model in your Horizon environment. The topics below describe each category of roles and privileges in detail.

• Predefined Administrator Roles: Lists the built-in administrator roles provided by Horizon Console and describes the privileges included in each role.

• Global Privileges: Describes the privileges that apply across the entire Horizon environment, regardless of which specific objects an administrator manages.

• Object-Specific Privileges: Describes the privileges that apply to specific objects in the Horizon environment, such as desktop pools, farms, or machines.

• Privilege Scopes: Explains how privilege scopes control the extent to which an administrator can perform actions on objects within the Horizon environment.

• Internal Privileges: Describes the internal privileges used by Horizon for system-level operations, which are not assignable to administrator roles.