Understanding Permissions - VMware View Manager 4.5 Admin Manual

Different Administrators for the Same Folder
You can create different administrators to manage the same folder.
For example, if your corporate desktop pools are in one folder, you can create one administrator that can view
and modify those pools and another administrator that can only view them.
Table 2-2 shows an example of this type of configuration.
Table 2-2. Different Administrators for the Same Folder
Administrator
view-domain.com\Admin1
view-domain.com\Admin2
In this example, the administrator called Admin1 has the Inventory Administrators role on the folder called
CorporateDesktops
on the same folder.

Understanding Permissions

View Administrator presents the combination of a role, an administrator user or group, and a folder as a
permission. The role defines the actions that can be performed, the user or group indicates who can perform
the action, and the folder contains the objects that are the target of the action.
Permissions appear differently in View Administrator depending on whether you select an administrator user
or group, a folder, or a role.
Table 2-3 shows how permissions appear in View Administrator when you select an administrator user or
group. The administrator user is called Admin 1 and it has two permissions.
Table 2-3. Permissions on the Administrators and Groups Tab for Admin 1
Role
Inventory Administrators
Administrators (Read only)
The first permission shows that Admin 1 has the Inventory Administrators role on the folder called
MarketingDesktops
the root folder.
Table 2-4 shows how the same permissions appear in View Administrator when you select the
MarketingDesktops
Table 2-4. Permissions on the Folders Tab for MarketingDesktops
Admin
view-domain.com\Admin1
view-domain.com\Admin1
The first permission is the same as the first permission shown in
from the second permission shown in
Admin1 has the Administrators (Read only) role on the
inherited, Yes appears in the Inherited column.
Table 2-5 shows how the first permission in
Inventory Administrators role.
VMware, Inc.
Role
Inventory Administrators
Inventory Administrators (Read only)
and the administrator called Admin2 has the Inventory Administrators (Read only) role
. The second permission shows that Admin 1 has the Administrators (Read only) role on
folder.
Role
Inventory Administrators
Administrators (Read only)
Table 2-3. Because folders inherit permissions from the root folder,
Table 2-3
Chapter 2 Configuring Role-Based Delegated Administration
Folder
/CorporateDesktops
/CorporateDesktops
Folder
MarketingDesktops
/
Inherited
Yes
Table 2-3. The second permission is inherited
folder. When a permission is
MarketingDesktops
appears in View Administrator when you select the
25