Administration

Table 4‑4. Permissions on the Folders Tab for MarketingDesktops
Admin Role Inherited
view-domain.com\Admin1 Inventory Administrators
view-domain.com\Admin1 Administrators (Read only) Yes
The first permission is the same as the first permission shown in Table 4-3. The second permission is
inherited from the second permission shown in Table 4-3. Because access groups inherit permissions from
the root access group, Admin1 has the Administrators (Read only) role on the MarketingDesktops access
group. When a permission is inherited, Yes appears in the Inherited column.
Table 4-5 shows how the first permission in Table 4-3 appears in View Administrator when you select the
Inventory Administrators role.
Table 4‑5. Permissions on the Role Tab for Inventory Administrators
Administrator Access Group
view-domain.com\Admin1
/MarketingDesktops
Manage Administrators
Users who have the Administrators role can use View Administrator to add and remove administrator users
and groups.
The Administrators role is the most powerful role in View Administrator. Initially, members of the View
Administrators account are given the Administrators role. You specify the View Administrators account
when you install View Connection Server. The View Administrators account can be the local Administrators
group (BUILTIN\Administrators) on the View Connection Server computer or a domain user or group
account.
NOTE By default, the Domain Admins group is a member of the local Administrators group. If you
specified the View Administrators account as the local Administrators group, and you do not want domain
administrators to have full access to inventory objects and View configuration settings, you must remove
the Domain Admins group from the local Administrators group.
n
Create an Administrator on page 66
To create an administrator, you select a user or group from your Active Directory users and groups in
View Administrator and assign an administrator role.
n
Remove an Administrator on page 67
You can remove an administrator user or group. You cannot remove the last super administrator in
the system. A super administrator is an administrator that has the Administrators role on the root
access group.
Create an Administrator
To create an administrator, you select a user or group from your Active Directory users and groups in View
Administrator and assign an administrator role.
Prerequisites
n
Become familiar with the predefined administrator roles. See “Predefined Roles and Privileges,” on
page 73.
n
Become familiar with the best practices for creating administrator users and groups. See “Best Practices
for Administrator Users and Groups,” on page 79.
View Administration
66 VMware, Inc.