Administration

The first permission is the same as the first permission shown in Table 6-3. Permissions on
the Administrators and Groups Tab for Admin 1. The second permission is inherited from the
second permission shown in Table 6-3. Permissions on the Administrators and Groups Tab for
Admin 1. Because access groups inherit permissions from the root access group, Admin1 has the
Administrators (Read only) role on the MarketingDesktops access group. When a permission is
inherited, Yes appears in the Inherited column.
The following table shows how the first permission in Table 6-3. Permissions on the Administrators
and Groups Tab for Admin 1 appears in Horizon Administrator when you select the Inventory
Administrators role.
Table 6-5. Permissions on the Role Tab for Inventory Administrators
Administrator Access Group
view-domain.com\Admin1
/MarketingDesktops
Manage Administrators
Users who have the Administrators role can use Horizon Administrator to add and remove
administrator users and groups.
The Administrators role is the most powerful role in Horizon Administrator. Initially, members
of the Administrators account are given the Administrators role. You specify the Administrators
account when you install Connection Server. The Administrators account can be the local
Administrators group (BUILTIN\Administrators) on the Connection Server computer or a domain
user or group account.
Note By default, the Domain Admins group is a member of the local Administrators group.
If you specified the Administrators account as the local Administrators group, and you do not
want domain administrators to have full access to inventory objects and Horizon 7 configuration
settings, you must remove the Domain Admins group from the local Administrators group.
n Create an Administrator
To create an administrator, you select a user or group from your Active Directory users and
groups in Horizon Administrator and assign an administrator role.
n Remove an Administrator
You can remove an administrator user or group. You cannot remove the last super
administrator in the system. A super administrator is an administrator that has the
Administrators role on the root access group.
Create an Administrator
To create an administrator, you select a user or group from your Active Directory users and
groups in Horizon Administrator and assign an administrator role.
Horizon 7 Administration
VMware, Inc. 129