Administration

Table 6-6. Predefined Roles in Horizon Administrator (continued)
Role User Capabilities
Applies to an
Access Group
Local Administrators Perform all local administrator operations, except for creating
additional administrator users and groups. In a Cloud Pod
Architecture environment, administrators that have this role
cannot perform operations on the Global Data Layer or manage
sessions on remote pods.
Note An administrator with the Local Administrators role cannot
access Horizon Help Desk Tool. Administrators in a non-CPA
environment do not have the Manage Global Sessions privilege,
which is required to perform tasks in Horizon Help Desk Tool.
Yes
Local Administrators (Read
Only)
Same as the Administrators (Read Only) role, except for
viewing inventory objects and settings in the Global Data Layer.
Administrators that have this role have read-only rights only on
the local pod.
Note An administrator with the Local Administrators (Read Only)
role cannot access Horizon Help Desk Tool. Administrators in a
non-CPA environment do not have the Manage Global Sessions
privilege, which is required to perform tasks in Horizon Help Desk
Tool.
Yes
Global Privileges
Global privileges control system-wide operations, such as viewing and changing global settings.
Roles that contain only global privileges cannot be applied to access groups.
The following table describes the global privileges and lists the predefined roles that contain each
privilege.
Horizon 7 Administration
VMware, Inc. 141