Administration

Table 4‑1. Different Administrators for Different Access Groups
Administrator Role Access Group
view-domain.com\Admin1 Inventory Administrators
/CorporateDesktops
view-domain.com\Admin2 Inventory Administrators
/DeveloperDesktops
In this example, the administrator called Admin1 has the Inventory Administrators role on the access group
called CorporateDesktops and the administrator called Admin2 has the Inventory Administrators role on the
access group called DeveloperDesktops.
Different Administrators for the Same Access Group
You can create different administrators to manage the same access group.
For example, if your corporate desktop pools are in one access group, you can create one administrator that
can view and modify those pools and another administrator that can only view them.
Table 4-2 shows an example of this type of configuration.
Table 4‑2. Different Administrators for the Same Access Group
Administrator Role Access Group
view-domain.com\Admin1 Inventory Administrators
/CorporateDesktops
view-domain.com\Admin2 Inventory Administrators (Read
only)
/CorporateDesktops
In this example, the administrator called Admin1 has the Inventory Administrators role on the access group
called CorporateDesktops and the administrator called Admin2 has the Inventory Administrators (Read
only) role on the same access group.
Understanding Permissions
View Administrator presents the combination of a role, an administrator user or group, and an access group
as a permission. The role defines the actions that can be performed, the user or group indicates who can
perform the action, and the access group contains the objects that are the target of the action.
Permissions appear differently in View Administrator depending on whether you select an administrator
user or group, an access group, or a role.
Table 4-3 shows how permissions appear in View Administrator when you select an administrator user or
group. The administrator user is called Admin 1 and it has two permissions.
Table 4‑3. Permissions on the Administrators and Groups Tab for Admin 1
Role Access Group
Inventory Administrators
MarketingDesktops
Administrators (Read only)
/
The first permission shows that Admin 1 has the Inventory Administrators role on the access group called
MarketingDesktops. The second permission shows that Admin 1 has the Administrators (Read only) role on
the root access group.
Table 4-4 shows how the same permissions appear in View Administrator when you select the
MarketingDesktops access group.
Chapter 4 Configuring Role-Based Delegated Administration
VMware, Inc. 65