6.0

Table Of Contents
Troubleshooting RSA SecurID Access Denial 44
Troubleshooting RADIUS Access Denial 44
Using Smart Card Authentication 45
Logging In with a Smart Card 45
Configure Smart Card Authentication 45
Prepare Active Directory for Smart Card Authentication 50
Verify Your Smart Card Authentication Configuration 52
Using SAML Authentication for Workspace Integration 53
Configure SAML Authenticators in View Administrator 54
Using Smart Card Certificate Revocation Checking 55
Logging in with CRL Checking 56
Logging in with OCSP Certificate Revocation Checking 56
Configure CRL Checking 57
Configure OCSP Certificate Revocation Checking 57
Smart Card Certificate Revocation Checking Properties 58
Using the Log In as Current User Feature Available with Windows-Based Horizon Client 59
Allow Users to Save Credentials 59
4
Configuring Role-Based Delegated Administration 61
Understanding Roles and Privileges 61
Using Access Groups to Delegate Administration of Pools and Farms 62
Different Administrators for Different Access Groups 62
Different Administrators for the Same Access Group 63
Understanding Permissions 63
Manage Administrators 64
Create an Administrator 64
Remove an Administrator 65
Manage and Review Permissions 65
Add a Permission 66
Delete a Permission 66
Review Permissions 67
Manage and Review Access Groups 67
Add an Access Group 68
Move a Desktop Pool or a Farm to a Different Access Group 68
Remove an Access Group 68
Review the Desktop Pools, Application Pools, or Farms in an Access Group 69
Review the vCenter Virtual Machines in an Access Group 69
Manage Custom Roles 69
Add a Custom Role 70
Modify the Privileges in a Custom Role 70
Remove a Custom Role 70
Predefined Roles and Privileges 71
Predefined Administrator Roles 71
Global Privileges 73
Object-Specific Privileges 74
Internal Privileges 74
Required Privileges for Common Tasks 75
Privileges for Managing Pools 75
Privileges for Managing Machines 75
View Administration
4 VMware, Inc.