4.5

Table 2-8. Object-Specific Privileges
(Continued)
Privilege
User Capabilities Object
Manage Persistent Disks Perform all View Composer persistent disk operations,
including attaching, detaching, and importing
persistent disks.
Persistent disk
Manage Pool Add, modify, and delete desktop pools and add and
remove desktops.
Desktop pool
Manage Remote Sessions Disconnect and log off remote sessions and send
messages to desktop users.
Desktop
Manage Reboot Operation Reset desktops. Desktop
Internal Privileges
Some of the predefined administrator roles contain internal privileges. You cannot select internal privileges
when you create custom roles.
Table 2-9 describes the internal privileges and lists the predefined roles that contain each privilege.
Table 2-9. Internal Privileges
Privilege Description Predefined Roles
Full (Read only) Grants read-only access to all settings. Administrators (Read only)
Manage Inventory
(Read only)
Grants read-only access to inventory objects. Inventory Administrators (Read only)
Manage Global
Configuration and
Policies (Read only)
Grants read-only access to configuration
settings and global policies except for
administrators and roles.
Global Configuration and Policy Administrators
(Read only)
Required Privileges for Common Tasks
Many common administration tasks require a coordinated set of privileges. Some operations require
permission at the root folder in addition to access to the object that is being manipulated.
Privileges for Managing Pools
An administrator must have certain privileges to manage pools in View Administrator.
Table 2-10 lists common pool management tasks and shows the privileges that are required to perform each
task. You perform these tasks on the Pools page in View Administrator.
Table 2-10. Pool Management Tasks and Privileges
Task
Required Privileges
Enable or disable a pool Enable Pool on the pool.
Entitle or unentitle users to a pool Entitle Pool on the pool.
Add a pool Manage Pool
IMPORTANT When adding a linked-clone pool, you must have
the Administrators role on the root folder to publish the base
image to the Transfer Server repository.
Modify or delete a pool Manage Pool on the pool.
Add or remove desktops from a pool Manage Pool on the pool.
Chapter 2 Configuring Role-Based Delegated Administration
VMware, Inc. 35