-
-
-
-
-
Delegated Administration and Director
This content has been machine translated dynamically.
Dieser Inhalt ist eine maschinelle Übersetzung, die dynamisch erstellt wurde. (Haftungsausschluss)
Cet article a été traduit automatiquement de manière dynamique. (Clause de non responsabilité)
Este artículo lo ha traducido una máquina de forma dinámica. (Aviso legal)
此内容已经过机器动态翻译。 放弃
このコンテンツは動的に機械翻訳されています。免責事項
이 콘텐츠는 동적으로 기계 번역되었습니다. 책임 부인
Este texto foi traduzido automaticamente. (Aviso legal)
Questo contenuto è stato tradotto dinamicamente con traduzione automatica.(Esclusione di responsabilità))
This article has been machine translated.
Dieser Artikel wurde maschinell übersetzt. (Haftungsausschluss)
Ce article a été traduit automatiquement. (Clause de non responsabilité)
Este artículo ha sido traducido automáticamente. (Aviso legal)
この記事は機械翻訳されています.免責事項
이 기사는 기계 번역되었습니다.책임 부인
Este artigo foi traduzido automaticamente.(Aviso legal)
这篇文章已经过机器翻译.放弃
Questo articolo è stato tradotto automaticamente.(Esclusione di responsabilità))
Translation failed!
Delegated Administration and Director
Delegated Administration uses three concepts: administrators, roles, and scopes. Permissions are based on an administrator’s role and the scope of this role. For example, an administrator might be assigned a Help Desk administrator role where the scope involves responsibility for end-users at one Site only.
For information about creating delegated administrators, see the main Delegated Administration document.
Administrative permissions determine the Director interface presented to administrators and the tasks they can perform. Permissions determine:
- The views the administrator can access, collectively referred to as a view.
- The desktops, machines, and sessions that the administrator can view and interact with.
- The commands the administrator can perform, such as shadowing a user’s session or enabling maintenance mode.
The built-in roles and permissions also determine how administrators use Director:
Administrator Role | Permissions in Director |
---|---|
Full Administrator | Full access to all views and can perform all commands, including shadowing a user’s session, enabling maintenance mode, and exporting trends data. |
Delivery Group Administrator | Full access to all views and can perform all commands, including shadowing a user’s session, power management and session management, enabling maintenance mode, and exporting trends data. |
Read Only Administrator | Can access all views and see all objects in specified scopes as well as global information. Can download reports from HDX channels and can export Trends data using the Export option in the Trends view. Cannot perform any other commands or change anything in the views. |
Help Desk Administrator | Can access only the Help Desk and User Details views and can view only objects that the administrator is delegated to manage. Can shadow a user’s session and perform commands for that user. Can perform maintenance mode operations. Can use power control options for Desktop OS Machines. Cannot access the Dashboard, Trends, Alerts, or Filters views. Cannot use power control options for Server OS machines. |
Machine Catalog Administrator | No access. This administrator is not supported for Director and cannot view data. This user can access the Machine Details page (Machine-based search). |
Host Administrator | No access. This administrator is not supported for Director and cannot view data. |
To configure custom roles for Director administrators
In Studio, you can also configure Director-specific, custom roles to more closely match the requirements of your organization and delegate permissions more flexibly. For example, you can restrict the built-in Help Desk administrator role so that this administrator cannot log off sessions.
If you create a custom role with Director permissions, you must also give that role other generic permissions:
- Delivery Controller permission to log on to Director - at least read only access in Administrator node
- Permissions to Delivery Groups to view the data related to those Delivery Groups in Director - at least read only access
Alternatively, you can create a custom role by copying an existing role and include additional permissions for different views. For example, you can copy the Help Desk role and include permissions to view the Dashboard or Filters pages.
Select the Director permissions for the custom role, which include:
- Perform Kill Application running on a machine
- Perform Kill Process running on a machine
- Perform Remote Assistance on a machine
- Perform Reset vDisk operation
- Reset user profiles
- View Client Details page
- View Dashboard page
- View Filters page
- View Machine Details page
- View Trends page
- View User Details page
In this example, Shadowing (Perform Remote Assistance on a machine) is turned off.
A permission can have dependencies on other permissions to become applicable on the UI. For example, selecting the Perform Kill Application running on a machine permission enables the End Application functionality only in those panels to which the role has permission. You can select the following panel permissions:
- View Filters page
- View User Details page
- View Machine Details page
- View Client Details page
In addition, from the list of permissions for other components, consider these permissions from Delivery Groups:
- Enable/disable maintenance mode of a machine using Delivery Group membership.
- Perform power operations on Windows Desktop machines using Delivery Group membership.
- Perform session management on machines using Delivery Group membership.
Share
Share
In this article
This Preview product documentation is Citrix Confidential.
You agree to hold this documentation confidential pursuant to the terms of your Citrix Beta/Tech Preview Agreement.
The development, release and timing of any features or functionality described in the Preview documentation remains at our sole discretion and are subject to change without notice or consultation.
The documentation is for informational purposes only and is not a commitment, promise or legal obligation to deliver any material, code or functionality and should not be relied upon in making Citrix product purchase decisions.
If you do not agree, select I DO NOT AGREE to exit.