6.1

Assigning Delegated Administrators to Desktop and Application
Pools
The administrator runs a workflow to delegate responsibilities to delegated administrators. If your setup
does not already contain a user group that has permission to register and update vCenter extensions, as well
as permission to execute workflows in Orchestrator, you must first create such a group.
Depending on your current setup, you might have already performed one or both of the first tasks.
Procedure
1 Create a Delegated Administrator Role Using vSphere Web Client on page 18
To use delegated administration, you must create a user group with permission to register and update
vCenter extensions.
2 Provide Access Rights to the Horizon vRealize Orchestrator Plug-In Workflows on page 19
After you create a delegated administrators group and assign it permission to perform actions on
vCenter extensions, you can give the group permission to view and execute workflows in
Orchestrator.
3 Assign Delegated Administrators to Pools on page 20
The administrator runs the Add Delegated Administrator Configuration workflow or the Add
Horizon Air Delegated Administrator Configuration workflow to set the scope of delegated
administration. For example, a certain delegated administrator might be limited to performing
operations on some pools, and a different delegated administrator might be limited to different pools.
What to do next
Restrict permissions to various workflow folders in Orchestrator.
Create a Delegated Administrator Role Using vSphere Web Client
To use delegated administration, you must create a user group with permission to register and update
vCenter extensions.
If you have been using vRealize Orchestrator and have already created users and groups that have
permission to register and update vCenter extensions, you might not need to perform all the steps described
in this topic. For example, if you already have such a group, but the user who will manage View desktop
pools and application pools is not in the group, you can simply add that user to the group.
Prerequisites
Verify that you have credentials for logging in to the vSphere Web Client as a user with vCenter Single Sign-
On administrator privileges.
Procedure
1 Log in to the vSphere Web Client as [e-mail] or as another user with vCenter Single
Sign-On administrator privileges.
2 Create a Delegated Administrators group.
a Browse to Administration > Single Sign-On > Users and Groups.
b Select the Groups tab and click the New Group icon.
c Supply a name such as Delegated Admins and click OK.
The new group appears in the list.
Using the Horizon vRealize Orchestrator Plug-In
18 VMware, Inc.