Administration

Table 4‑6. Predefined Roles in View Administrator (Continued)
Role User Capabilities
Applies to an
Access Group
Local Administrators Perform all local administrator operations, except for creating
additional administrator users and groups. In a Cloud Pod
Architecture environment, administrators that have this role
cannot perform operations on the Global Data Layer or manage
sessions on remote pods.
Yes
Local Administrators (Read
Only)
Same as the Administrators (Read Only) role, except for viewing
inventory objects and settings in the Global Data Layer.
Administrators that have this role have read-only rights only on
the local pod.
Yes
Global Privileges
Global privileges control system-wide operations, such as viewing and changing global settings. Roles that
contain only global privileges cannot be applied to access groups.
Table 4-7 describes the global privileges and lists the predefined roles that contain each privilege.
Table 4‑7. Global Privileges
Privilege User Capabilities Predefined Roles
Console Interaction Log in to and use View Administrator. Administrators
Administrators (Read only)
Inventory Administrators
Inventory Administrators (Read only)
Global Configuration and Policy
Administrators
Global Configuration and Policy
Administrators (Read only)
Direct Interaction Run all PowerShell commands and
command line utilities, except for vdmadmin
and vdmimport.
Administrators must have the
Administrators role on the root access group
to use the vdmadmin, vdmimport, and
lmvutil commands.
Administrators
Administrators (Read only)
Manage Global
Configuration and
Policies
View and modify global policies and
configuration settings except for
administrator roles and permissions.
Administrators
Global Configuration and Policy
Administrators
Manage Global
Sessions
Manage global sessions in a Cloud Pod
Architecture environment.
Administrators
Manage Roles and
Permissions
Create, modify, and delete administrator
roles and permissions.
Administrators
Register Agent Install View Agent on unmanaged
machines, such as physical systems,
standalone virtual machines, and RDS hosts.
During View Agent installation, you must
provide your administrator login credentials
to register the unmanaged machine with the
View Connection Server instance.
Administrators
Agent Registration Administrators
Chapter 4 Configuring Role-Based Delegated Administration
VMware, Inc. 75