Administration

Table 6‑6. Predefined Roles in Horizon Administrator (Continued)
Role User Capabilities
Applies to an Access
Group
Local Administrators Perform all local administrator operations, except for creating
additional administrator users and groups. In a Cloud Pod Architecture
environment, administrators that have this role cannot perform
operations on the Global Data Layer or manage sessions on remote
pods.
Note An administrator with the Local Administrators role cannot
access Horizon Help Desk Tool. Administrators in a non-CPA
environment do not have the Manage Global Sessions privilege, which
is required to perform tasks in Horizon Help Desk Tool.
Yes
Local Administrators (Read
Only)
Same as the Administrators (Read Only) role, except for viewing
inventory objects and settings in the Global Data Layer. Administrators
that have this role have read-only rights only on the local pod.
Note An administrator with the Local Administrators (Read Only) role
cannot access Horizon Help Desk Tool. Administrators in a non-CPA
environment do not have the Manage Global Sessions privilege, which
is required to perform tasks in Horizon Help Desk Tool.
Yes
Global Privileges
Global privileges control system-wide operations, such as viewing and changing global settings. Roles
that contain only global privileges cannot be applied to access groups.
Table 6‑7 describes the global privileges and lists the predefined roles that contain each privilege.
Table 6‑7. Global Privileges
Privilege User Capabilities Predefined Roles
Console Interaction Log in to and use View Administrator. Administrators
Administrators (Read only)
Inventory Administrators
Inventory Administrators (Read only)
Global Configuration and Policy Administrators
Global Configuration and Policy Administrators
(Read only)
Direct Interaction Run all PowerShell commands and command
line utilities, except for vdmadmin and
vdmimport.
Administrators must have the Administrators role
on the root access group to use the vdmadmin,
vdmimport, and lmvutil commands.
Administrators
Administrators (Read only)
Manage Global
Configuration and
Policies
View and modify global policies and
configuration settings except for administrator
roles and permissions.
Administrators
Global Configuration and Policy Administrators
Manage Global
Sessions
Manage global sessions in a Cloud Pod
Architecture environment.
Administrators
View Administration
VMware, Inc. 128