Administration

You can use Horizon Administrator to create access groups and to move existing desktop pools to
access groups. When you create an automated desktop pool, a manual pool, or a farm, you can
accept the default root access group or select a different access group.
Note If you intend to provide access to your desktops and applications through VMware
Identity Manager, verify that you create the desktop and application pools as a user who has
the Administrators role on the root access group in Horizon Administrator. If you give the user
the Administrators role on an access group other than the root access group, VMware Identity
Manager will not recognize the SAML authenticator you configure in Horizon 7, and you cannot
configure the pool in VMware Identity Manager.
n Different Administrators for Different Access Groups
You can create a different administrator to manage each access group in your configuration.
n Different Administrators for the Same Access Group
You can create different administrators to manage the same access group.
Different Administrators for Different Access Groups
You can create a different administrator to manage each access group in your configuration.
For example, if your corporate desktop pools are in one access group and your desktop pools
for software developers are in another access group, you can create different administrators to
manage the resources in each access group.
Table 6-1. Different Administrators for Different Access Groups shows an example of this type of
configuration.
Table 6-1. Different Administrators for Different Access Groups
Administrator Role Access Group
view-domain.com\Admin1 Inventory Administrators
/CorporateDesktops
view-domain.com\Admin2 Inventory Administrators
/DeveloperDesktops
In this example, the administrator called Admin1 has the Inventory Administrators role on the
access group called CorporateDesktops and the administrator called Admin2 has the Inventory
Administrators role on the access group called DeveloperDesktops.
Different Administrators for the Same Access Group
You can create different administrators to manage the same access group.
For example, if your corporate desktop pools are in one access group, you can create one
administrator that can view and modify those pools and another administrator that can only view
them.
Table 6-2. Different Administrators for the Same Access Group shows an example of this type of
configuration.
Horizon 7 Administration
VMware, Inc. 127