4.5

Table Of Contents
Privileges for Managing Users and Administrators
An administrator must have certain privileges to manage users and administrators in View Administrator.
Table
2-13 lists common user and administrator management tasks and shows the privileges that are required
to perform each task. You manage users on the Users and Groups page in View Administrator. You manage
administrators on the Global Administrators View page in View Administrator.
Table 2-13. User and Administrator Management Tasks and Privileges
Task
Required Privileges
Update general user information Manage Global Configuration and Policies
Send messages to desktop users Manage Remote Sessions on the desktop.
Add an administrator user or group Manage Roles and Permissions
Add, modify, or delete an administrator permission Manage Roles and Permissions
Add, modify, or delete an administrator role Manage Roles and Permissions
Privileges for General Administration Tasks and Commands
An
administrator must have certain privileges to perform general administration tasks and run command line
utilities.
Table 2-14 shows the privileges that are required to perform general administration tasks and run command
line utilities.
Table 2-14. Privileges for General Administration Tasks and Commands
Task
Required Privileges
Add or delete a folder Must have the Administrators role on the root folder.
Manage ThinApp applications and settings in View
Administrator
Must have the Administrators role on the root folder.
View and modify View Transfer Server instances and the
Transfer Server repository
Must have the Administrators role on the root folder.
Install View Agent on an unmanaged desktop source, such
as a physical system, standalone virtual machine, or terminal
server
Register Agent
View or modify configuration settings (except for
administrators) in View Administrator
Manage Global Configuration and Policies
Use PowerShell commands and command line utilities
except for vdmadmin, vdmimport, and vdmexport
Direct Interaction
Use the vdmadmin and vdmimport commands Must have the Administrators role on the root folder.
Use the vdmexport command Must have the Administrators role or the Administrators
(Read only) role on the root folder.
Best Practices for Administrator Users and Groups
To
increase the security and manageability of your View environment, you should follow best practices when
managing administrator users and groups.
n
Because the Administrators role contains all privileges, assign it to a single user or to a limited set of users.
n
Choose a local Windows user or group to have the Administrators role.
Chapter 2 Configuring Role-Based Delegated Administration
VMware, Inc. 37