| Value | Description |
|---|
| ADMINISTRATOR | Full administrator privilege, including Multi-Datacenter View configuration. |
| ADMINISTRATOR_VIEW | Full read-only administrator privilege, including Multi-Datacenter View configuration. |
| VC_CONFIG_VIEW | Read-only access to vCenter Configuration. |
| LOG_COLLECTION | Collect Operation Logs. |
| FORENSICS | Manage Forensics Operations. |
| LOCAL_ADMINISTRATOR | Full local administrator privilege, except for Multi-Datacenter View configuration and managing roles/privileges. |
| LOCAL_ADMINISTRATOR_VIEW | Full local read-only administrator privilege, except for Multi-Datacenter View configuration. |
| INVENTORY_ADMINISTRATOR | Access to all inventory objects. |
| INVENTORY_ADMINISTRATOR_VIEW | Read-only access to all inventory objects. |
| HELPDESK_ADMINISTRATOR | Access to Help Desk portal. |
| HELPDESK_ADMINISTRATOR_VIEW | Read-only access to Help Desk portal. |
| FEDERATED_LDAP_MANAGE | Manage Pod (Multi-Datacenter View) Federation. |
| FEDERATED_LDAP_VIEW | Read-only access to global (Multi-Datacenter View) LDAP. |
| FEDERATED_SESSIONS_MANAGE | Manage federated (local and non-local) sessions. |
| FEDERATED_SESSIONS_VIEW | Read-only access to federated (local and non-local) sessions. |
| GLOBAL_ADMINISTRATOR | Manage global (non-inventory) configuration settings, including global (Multi-Datacenter View) LDAP. |
| GLOBAL_ADMINISTRATOR_VIEW | Read-only access to global (non-inventory) configuration settings, including global (Multi-Datacenter View) LDAP. |
| GLOBAL_ADMIN_UI_INTERACTIVE | Can log into View Administrator. |
| GLOBAL_ADMIN_SDK_INTERACTIVE | Can run all command line utilities and PowerShell commands. |
| GLOBAL_MACHINE_REGISTER | Register non-vCenter machine sources such as Windows Terminal Servers and physical PCs. |
| GLOBAL_ROLE_PERMISSION_MANAGEMENT | Add, modify, and delete administrator roles and permissions. |
| GLOBAL_ROLE_MANAGEMENT | Add, modify, and delete administrator roles. |
| GLOBAL_ROLE_VIEW | Read-only access to administrator roles. |
| GLOBAL_PERMISSION_VIEW | Read-only access to administrator permissions. |
| GLOBAL_PERMISSION_MANAGEMENT | Add, modify, and delete administrator permissions. |
| GLOBAL_CONFIG_VIEW | Read-only access to global (non-inventory) policy, configuration, and RDS server settings. |
| GLOBAL_CONFIG_MANAGEMENT | View and change global (non-inventory) policy, configuration, and RDS server settings. |
| FOLDER_MANAGEMENT | Add, modify, and delete access groups. |
| FOLDER_VIEW | Read-only access to access groups. |
| POOL_VIEW | Read-only access to desktops, farms, applications, their local sessions, and their machines. |
| POOL_MANAGEMENT | Add, modify, and delete desktops, applications, and farms. Add and remove machines from desktops. |
| POOL_ENABLE | Enable and disable desktops, farms, and applications. |
| POOL_ENTITLE | Add and remove desktop and application entitlements. |
| POOL_SVI_IMAGE_MANAGEMENT | Schedule push image, maintenance, and change default image for desktops and farms. |
| MACHINE_VIEW | Read-only access to machines and their local sessions. |
| MACHINE_MANAGEMENT | Perform all machine and session-related commands. |
| MACHINE_REBOOT | Reset local machines. |
| MACHINE_SHUTDOWN | Shutdown local machines. |
| MACHINE_MANAGE_VDI_SESSION | Disconnect, logoff, and send messages to local sessions. |
| MACHINE_MANAGE_OFFLINE_SESSION | Roll back offline sessions and initiate replications. |
| MACHINE_USER_MANAGEMENT | Assign and unassign users for machines, update machine aliases for machines. |
| MACHINE_MAINTENANCE | Put machine in and out of maintenance mode. |
| MANAGE_REMOTE_PROCESS | Manage Remote Processes and Applications. |
| REMOTE_ASSISTANCE | Remote Assistance to Remote desktop. |
| API_SMART_CARD_BYPASS | Allows API's credential-based login when smart card authentication mode is REQUIRED. |
| MANAGE_CERTIFICATES | Allows user to import certificates or generate CSR. |
| UDD_VIEW | Read-only access to persistent disks. |
| UDD_MANAGEMENT | Manage persistent disks. |
| HORIZON_CLOUD_SERVICE | Allows Horizon cloud service to activate subscription license and monitoring from the cloud. |
| SUBSCRIPTION_LICENSE_ADD | Allows activation of subscription license. |
| CLOUD_ADMIN | Allows Cloud Admin login. |
| CLOUD_ON_BOARDING_MANAGEMENT | Enables cloud onboarding operations. |
| CLOUD_OPS_MANAGEMENT | Enables post-onboarding operations from the cloud. |
| CAPACITY_PROVIDER_CONFIG_VIEW | Manage Capacity Provider Configuration (Read Only). |
| CAPACITY_PROVIDER_CONFIG_MANAGEMENT | Manage Capacity Provider Configuration. |