5.2

Internal Privileges
Some of the predefined administrator roles contain internal privileges. You cannot select internal privileges
when you create custom roles.
Table 2-9 describes the internal privileges and lists the predefined roles that contain each privilege.
Table 2-9. Internal Privileges
Privilege Description Predefined Roles
Full (Read only) Grants read-only access to all settings. Administrators (Read only)
Manage Inventory
(Read only)
Grants read-only access to inventory objects. Inventory Administrators (Read only)
Manage Global
Configuration and
Policies (Read only)
Grants read-only access to configuration
settings and global policies except for
administrators and roles.
Global Configuration and Policy Administrators
(Read only)
Required Privileges for Common Tasks
Many common administration tasks require a coordinated set of privileges. Some operations require
permission at the root folder in addition to access to the object that is being manipulated.
Privileges for Managing Pools
An administrator must have certain privileges to manage pools in View Administrator.
Table 2-10 lists common pool management tasks and shows the privileges that are required to perform each
task. You perform these tasks on the Pools page in View Administrator.
Table 2-10. Pool Management Tasks and Privileges
Task Required Privileges
Enable or disable a pool Enable Pool on the pool.
Entitle or unentitle users to a pool Entitle Pool on the pool.
Add a pool Manage Pool
IMPORTANT
When adding a linked-clone pool, you must have
the Administrators role on the root folder to publish the base
image to the Transfer Server repository.
Modify or delete a pool Manage Pool on the pool.
Add or remove desktops from a pool Manage Pool on the pool.
Refresh, Recompose, Rebalance, or change the default View
Composer image
Manage Composer Pool Image on the pool.
Change folders Manage Pool on both the source and target folders.
Privileges for Managing Desktops
An administrator must have certain privileges to manage desktops in View Administrator.
Table 2-11 lists common desktop management tasks and shows the privileges that are required to perform
each task. You perform these tasks on the Desktops page in View Administrator.
Chapter 2 Configuring Role-Based Delegated Administration
VMware, Inc. 51