Skip to content

Data Object - RoleBase

Java Class

com.omnissa.vdi.vlsi.binding.vdi.users.Role.RoleBase

Property of

RoleInfo

Parameter to

Role_Create

Since

Horizon View 6.0

Data Object Description

Base data used for role creation.

Data Object Properties

Name Type Description
name xsd:string The role name. 2 3
description xsd:string The role description. 1 4
privileges xsd:string[] Privileges for this role. When being created or updated, input non-selectable privileges are ignored. 1
This property will be one of:
ValueDescription
ADMINISTRATORADMINISTRATOR Privilege
Name: Full
Type: All
Description: Full administrator privilege, including Multi-Datacenter View configuration.
Selectable: no
ADMINISTRATOR_VIEWADMINISTRATOR_VIEW Privilege
Name: Full (Read only)
Type: All
Description: Full read only administrator privilege, including Multi-Datacenter View configuration.
Selectable: no
VC_CONFIG_VIEWVC_CONFIG_VIEW Privilege
Name: Manage vCenter Configuration (Read Only)
Type: All
Description: Read only access to vCenter Configuration.
Selectable: yes
LOG_COLLECTIONLOG_COLLECTION Privilege
Name: Collect Operation Logs
Type: All
Description: Collect Operation Logs
Selectable: yes
LOCAL_ADMINISTRATORLOCAL_ADMINISTRATOR Privilege
Name: Full Local
Type: All
Description: Full administrator privilege, except to Multi-Datacenter View configuration and to manage roles and privileges.
Selectable: no
LOCAL_ADMINISTRATOR_VIEWLOCAL_ADMINISTRATOR_VIEW Privilege
Name: Full Local (Read only)
Type: All
Description: Full read only administrator privilege, except to Multi-Datacenter View configuration.
Selectable: no
INVENTORY_ADMINISTRATORINVENTORY_ADMINISTRATOR Privilege
Name: Manage Inventory
Type: All
Description: Access to all inventory objects.
Selectable: no
INVENTORY_ADMINISTRATOR_VIEWINVENTORY_ADMINISTRATOR_VIEW Privilege
Name: Manage Inventory (Read only)
Type: All
Description: Read only access to all inventory objects.
Selectable: no
HELPDESK_ADMINISTRATORHELPDESK_ADMINISTRATOR Privilege
Name: Manage Help Desk
Type: All
Description: Access to Help Desk portal.
Selectable: no
HELPDESK_ADMINISTRATOR_VIEWHELPDESK_ADMINISTRATOR_VIEW Privilege
Name: Manage Help Desk (Read only)
Type: All
Description: Read only access to Help Desk portal.
Selectable: yes
FEDERATED_LDAP_MANAGEFEDERATED_LDAP_MANAGE Privilege
Name: Manage Pod Federation
Type: All
Description: Manage Pod (Multi-Datacenter View) Federation.
Selectable: yes
FEDERATED_LDAP_VIEWFEDERATED_LDAP_VIEW Privilege
Name: Manage Global LDAP (Read only)
Type: All
Description: Read only access to global (Multi-Datacenter View) LDAP.
Selectable: no
FEDERATED_SESSIONS_MANAGEFEDERATED_SESSIONS_MANAGE Privilege
Name: Manage Federated Sessions
Type: All
Description: Manage federated (local and non-local) sessions.
Selectable: yes
FEDERATED_SESSIONS_VIEWFEDERATED_SESSIONS_VIEW Privilege
Name: Manage Federated Sessions (Read only)
Type: All
Description: Read only access to federated (local and non-local) sessions.
Selectable: no
GLOBAL_ADMINISTRATORGLOBAL_ADMINISTRATOR Privilege
Name: Manage Global Configuration
Type: All
Description: Manage global (non-inventory) configuration settings, including global (Multi-Datacenter View) LDAP.
Selectable: no
GLOBAL_ADMINISTRATOR_VIEWGLOBAL_ADMINISTRATOR_VIEW Privilege
Name: Manage Global Configuration (Read only)
Type: All
Description: Read only access to global (non-inventory) configuration settings, including global (Multi-Datacenter View) LDAP.
Selectable: no
GLOBAL_ADMIN_UI_INTERACTIVEGLOBAL_ADMIN_UI_INTERACTIVE Privilege
Name: Console Interaction
Type: Global
Description: Can log into View Administrator.
Selectable: no
GLOBAL_ADMIN_SDK_INTERACTIVEGLOBAL_ADMIN_SDK_INTERACTIVE Privilege
Name: Direct Interaction
Type: Global
Description: Can run all command line utilities and PowerShell commands.
Selectable: no
GLOBAL_MACHINE_REGISTERGLOBAL_MACHINE_REGISTER Privilege
Name: Register Agent
Type: Global
Description: Register non-vCenter machine sources such as Windows Terminal Servers and physical PCs.
Selectable: yes
GLOBAL_ROLE_PERMISSION_MANAGEMENTGLOBAL_ROLE_PERMISSION_MANAGEMENT Privilege
Name: Manage Roles and Permissions
Type: Global
Description: Add, modify, and delete administrator roles and permissions.
Selectable: yes
GLOBAL_ROLE_MANAGEMENTGLOBAL_ROLE_MANAGEMENT Privilege
Name: Manage Roles
Type: Global
Description: Add, modify, and delete administrator roles.
Selectable: no
GLOBAL_ROLE_VIEWGLOBAL_ROLE_VIEW Privilege
Name: Manage Roles (Read only)
Type: Global
Description: Read only access to administrator roles.
Selectable: no
GLOBAL_PERMISSION_VIEWGLOBAL_PERMISSION_VIEW Privilege
Name: Manage Permissions (Read only)
Type: Global
Description: Read only access to administrator permissions.
Selectable: no
GLOBAL_PERMISSION_MANAGEMENTGLOBAL_PERMISSION_MANAGEMENT Privilege
Name: Manage Permissions
Type: Global
Description: Add, modify, and delete administrator permissions.
Selectable: no
GLOBAL_CONFIG_VIEWGLOBAL_CONFIG_VIEW Privilege
Name: Manage Global Configuration and Policies (Read only)
Type: Global
Description: Read only access to global (non-inventory) policy, configuration, and RDS server settings, except administrator roles and permissions and global (Multi-Datacenter View) LDAP.
Selectable: no
GLOBAL_CONFIG_MANAGEMENTGLOBAL_CONFIG_MANAGEMENT Privilege
Name: Manage Global Configuration and Policies
Type: Global
Description: View and change global (non-inventory) policy, configuration, and RDS server settings, except for administrator roles and permissions.
Selectable: yes
THINAPP_VIEWTHINAPP_VIEW Privilege
Name: Manage ThinApp (Read only)
Type: Global
Description: Read only access to ThinApps.
Selectable: no
THINAPP_MANAGEMENTTHINAPP_MANAGEMENT Privilege
Name: Manage ThinApp
Type: Global
Description: Add, modify, and delete ThinApps, perform all ThinApp related commands.
Selectable: yes
Includes: THINAPP_ENTITLE
THINAPP_ENTITLETHINAPP_ENTITLE Privilege
Name: Entitle ThinApp
Type: Global
Description: Add and remove ThinApp assignments.
Selectable: yes
FOLDER_MANAGEMENTFOLDER_MANAGEMENT Privilege
Name: Manage Access Groups
Type: Global
Description: Add, modify, and delete access groups.
Selectable: yes
FOLDER_VIEWFOLDER_VIEW Privilege
Name: Manage Access Groups (Read only)
Type: Access group
Description: Read only access to access groups.
Selectable: no
POOL_VIEWPOOL_VIEW Privilege
Name: Manage Desktops, Farms, and Applications (Read only)
Type: Inventory - desktop
Description: Read only access to desktops, farms, applications, their local sessions, and their machines.
Selectable: no
POOL_MANAGEMENTPOOL_MANAGEMENT Privilege
Name: Manage Desktops, Farms, and Applications
Type: Inventory - desktop
Description: Add, modify, and delete desktops, applications and farms. Add and remove machines from desktops.
Selectable: yes
Includes: POOL_ENABLE, POOL_ENTITLE, POOL_SVI_IMAGE_MANAGEMENT
POOL_ENABLEPOOL_ENABLE Privilege
Name: Enable Desktops, Farms, and Applications
Type: Inventory - desktop
Description: Enable and disable desktops, farms, and applications.
Selectable: yes
POOL_ENTITLEPOOL_ENTITLE Privilege
Name: Entitle Desktops and Applications
Type: Inventory - desktop
Description: Add and remove desktop and application entitlements.
Selectable: yes
POOL_SVI_IMAGE_MANAGEMENTPOOL_SVI_IMAGE_MANAGEMENT Privilege
Name: Manage maintenance operations on Automated Desktops & Farms
Type: Inventory - desktop
Description: Recompose, refresh, rebalance, schedule push image, schedule maintenance and change default image for desktop and farm.
Selectable: yes
MACHINE_VIEWMACHINE_VIEW Privilege
Name: Manage Machines (read only)
Type: Inventory - machine
Description: Read only access to machines and their local sessions.
Selectable: no
MACHINE_MANAGEMENTMACHINE_MANAGEMENT Privilege
Name: Manage Machines
Type: Inventory - machine
Description: Perform all machine and session-related commands.
Selectable: yes
Includes: MACHINE_REBOOT, MACHINE_MANAGE_VDI_SESSION, MACHINE_MANAGE_OFFLINE_SESSION
MACHINE_REBOOTMACHINE_REBOOT Privilege
Name: Manage Reboot Operation
Type: Inventory - machine
Description: Reset local machines.
Selectable: yes
MACHINE_MANAGE_VDI_SESSIONMACHINE_MANAGE_VDI_SESSION Privilege
Name: Manage Local Sessions
Type: Inventory - machine
Description: Disconnect, logoff, and send messages to local sessions.
Selectable: yes
MACHINE_MANAGE_OFFLINE_SESSIONMACHINE_MANAGE_OFFLINE_SESSION Privilege
Name: Manage Offline Sessions
Type: Inventory - machine
Description: Roll back offline sessions and initiate replications.
Selectable: yes
MANAGE_REMOTE_PROCESSMANAGE_REMOTE_PROCESS Privilege
Name: Manage Remote Processes and Applications
Type: Inventory - machine
Description: Manage Remote Processes and Applications.
Selectable: yes
REMOTE_ASSISTANCEREMOTE_ASSISTANCE Privilege
Name: Remote Assistance
Type: Inventory - machine
Description: Remote Assistance to Remote desktop.
Selectable: yes
UDD_VIEWUDD_VIEW Privilege
Name: Manage Persistent Disks (Read only)
Type: Inventory - persistent disk
Description: Read only access to persistent disks.
Selectable: no
UDD_MANAGEMENTUDD_MANAGEMENT Privilege
Name: Manage Persistent Disks
Type: Inventory - persistent disk
Description: Manage persistent disks.
Selectable: yes

  1. This property need not be set. 

  2. This property cannot be updated. 

  3. This property must contain only alphanumerics, spaces, underscores, and dashes. The maximum length is 32 characters. 

  4. This property has a maximum length of 400 characters.