6.0

Provide Access Rights to the Horizon vCenter Orchestrator Plug-In Workflows
After you create a delegated administrators group and assign it permission to perform actions on vCenter
extensions, you can give the group permission to view and execute workflows in Orchestrator.
If you have been using vCenter Orchestrator and have already created users and groups that have
permission to view, inspect, and execute vCenter extensions, you might not need to perform the procedure
described in this topic.
Prerequisites
n
Verify that you have administrator credentials for the Orchestrator server. The account must be a
member of the vCenter Orchestrator Admin group configured to authenticate through vCenter Single
Sign-On.
n
Verify that you have created a delegated administrators group and assigned a role that has Extensions
permissions in vCenter. See “Create a Delegated Administrator Role Using vSphere Web Client,” on
page 14.
Procedure
1 Log in to the Orchestrator client as an administrator, and select Design from the drop-down menu in
the upper-left portion of the screen.
2 Right-click the root directory in the left pane and select Edit access rights.
3 In the Edit Access Rights dialog box, click Add access rights.
4 In the Chooser dialog box, in the Filter text box, type the first few letters of the name of the delegated
administrators group, and when the group name appears in the list, select the group.
5 Select the View check box, deselect any other check boxes, and click Select.
The group is added to the list in the Edit Access Rights dialog box.
6 Click Save and close.
The group is added on the Permissions tab, and in the Rights column, you see that the group has View
permissions.
7 Expand the library in the left pane and right-click the Horizon folder.
8 Select Edit access rights from the context menu, and click Add access rights.
9 Type the name of the delegated administrators group in the Filter text box, select the group in the list,
and select the View, Inspect, and Execute check boxes.
10 Click Select in the Chooser dialog box, and click Save and close in the Edit Access Rights dialog box.
The group is added on the Permissions tab and in the Rights column, you see that the group has View,
Inspect, and Execute permissions.
What to do next
Assign the delegated administrators group to specific desktop and application pools. See “Assign Delegated
Administrators to Pools,” on page 17.
Using the Horizon vCenter Orchestrator Plug-In
16 VMware, Inc.