PrivilegeInfo

Information about privileges.

JSON Example

{
    "name": "FEDERATED_LDAP_MANAGE",
    "sub_privileges": [
        "FEDERATED_LDAP_VIEW",
        "POOL_VIEW",
        "MACHINE_VIEW"
    ]
}

string

name

Optional

Name of the privilege.

ADMINISTRATOR: Full administrator privilege, including Multi-Datacenter View configuration. This is a non-selectable privilege.
ADMINISTRATOR_VIEW: Full read only administrator privilege, including Multi-Datacenter View configuration. This is a non-selectable privilege.
VC_CONFIG_VIEW: Manage vCenter Configuration (Read Only).
LOG_COLLECTION: Collect Operation Logs.
FORENSICS: Manage Forensics Operations.
MANAGE_CERTIFICATES: Manage Certificates.
LOCAL_ADMINISTRATOR: Full administrator privilege, except to Multi-Datacenter View configuration and to manage roles and privileges. This is a non-selectable privilege.
LOCAL_ADMINISTRATOR_VIEW: Full read only administrator privilege, except to Multi-Datacenter View configuration. This is a non-selectable privilege.
INVENTORY_ADMINISTRATOR: Access to all inventory objects. This is a non-selectable privilege.
INVENTORY_ADMINISTRATOR_VIEW: Read only access to all inventory objects. This is a non-selectable privilege.
HELPDESK_ADMINISTRATOR: Manage Help Desk. This is a non-selectable privilege.
HELPDESK_ADMINISTRATOR_VIEW: Manage Help Desk (Read only).
FEDERATED_LDAP_MANAGE: Manage Pod Federation.
FEDERATED_LDAP_VIEW: Manage Global LDAP (Read only). This is a non-selectable privilege.
FEDERATED_SESSIONS_MANAGE: Manage Federated Sessions.
FEDERATED_SESSIONS_VIEW: Manage Federated Sessions (Read only). This is a non-selectable privilege.
GLOBAL_ADMINISTRATOR: Manage Global Configuration. This is a non-selectable privilege.
GLOBAL_ADMINISTRATOR_VIEW: Manage Global Configuration (Read only). This is a non-selectable privilege.
GLOBAL_ADMIN_UI_INTERACTIVE: Can log into View Administrator. This is a non-selectable privilege.
GLOBAL_ADMIN_SDK_INTERACTIVE: Can run all command line utilities and PowerShell commands. This is a non-selectable privilege.
GLOBAL_MACHINE_REGISTER: Register non-vCenter machine sources such as Windows Terminal Servers and physical PCs.
GLOBAL_ROLE_PERMISSION_MANAGEMENT: Add, modify, and delete administrator roles and permissions.
GLOBAL_ROLE_MANAGEMENT: Add, modify, and delete administrator roles. This is a non-selectable privilege.
GLOBAL_ROLE_VIEW: Read only access to administrator roles. This is a non-selectable privilege.
GLOBAL_PERMISSION_VIEW: Read only access to administrator permissions. This is a non-selectable privilege.
GLOBAL_PERMISSION_MANAGEMENT: Add, modify, and delete administrator permissions. This is a non-selectable privilege.
GLOBAL_CONFIG_VIEW: Read only access to global (non-inventory) policy, configuration, and RDS server settings, except administrator roles and permissions and global (Multi-Datacenter View) LDAP. This is a non-selectable privilege.
GLOBAL_CONFIG_MANAGEMENT: View and change global (non-inventory) policy, configuration, and RDS server settings, except for administrator roles and permissions.
FOLDER_MANAGEMENT: Add, modify, and delete access groups.
FOLDER_VIEW: Read only access to access groups. This is a non-selectable privilege.
POOL_VIEW: Read only access to desktop pools, farms, applications, their local sessions, and their machines. This is a non-selectable privilege.
POOL_MANAGEMENT: Add, modify, and delete desktop pools, applications and farms. Add and remove machines from desktop pools.
POOL_ENABLE: Enable and disable desktop pools, farms, and applications.
POOL_ENTITLE: Add and remove desktop pool and application entitlements.
POOL_SVI_IMAGE_MANAGEMENT: Schedule push image, schedule maintenance and change default image for desktop pool and farm.
MACHINE_VIEW: Read only access to machines and their local sessions. This is a non-selectable privilege.
MACHINE_MANAGEMENT: Perform all machine and session-related commands.
MACHINE_REBOOT: Reset local machines.
MACHINE_MANAGE_VDI_SESSION: Disconnect, logoff, and send messages to local sessions.
MACHINE_MANAGE_OFFLINE_SESSION: Roll back offline sessions and initiate replications.
MACHINE_USER_MANAGEMENT: Assign and un-assign users for machines, Update machine aliases for machines.
MACHINE_MAINTENANCE: Put machine in and out of maintenance mode.
MANAGE_REMOTE_PROCESS: Manage Remote Processes and Applications.
REMOTE_ASSISTANCE: Remote Assistance to Remote desktop pool.
GLOBAL_CVP_REGISTER: Global CVP Register. This is a non-selectable privilege.
GLOBAL_CVP_PUBLICATION: Global CVP Publication. This is a non-selectable privilege.
CVP_INTERACTIVE: CVP Interactive. This is a non-selectable privilege.
CVP_VIEW: CVP View. This is a non-selectable privilege.
CVP_MANAGEMENT: CVP Management.This is a non-selectable privilege.
CVP_OWNERSHIP: CVP Ownership.This is a non-selectable privilege.
API_SMART_CARD_BYPASS: Allows API's credential based login when smart card authentication mode is REQUIRED.
UDD_VIEW: Read only access to persistent disks. This is a non-selectable privilege.
UDD_MANAGEMENT: Manage persistent disks.
HORIZON_CLOUD_SERVICE: Allows subscription license activation and cloud monitoring through horizon cloud service.
SUBSCRIPTION_LICENSE_ADD: Allows subscription license activation.
CLOUD_ADMIN: Allows Cloud Admin Authentication.
UNKNOWN_PRIVILEGE: Unknown Privilege type. This is a non-selectable privilege.

Possible values are : ADMINISTRATOR, ADMINISTRATOR_VIEW, VC_CONFIG_VIEW, LOG_COLLECTION, FORENSICS, MANAGE_CERTIFICATES, LOCAL_ADMINISTRATOR, LOCAL_ADMINISTRATOR_VIEW, INVENTORY_ADMINISTRATOR, INVENTORY_ADMINISTRATOR_VIEW, HELPDESK_ADMINISTRATOR, HELPDESK_ADMINISTRATOR_VIEW, FEDERATED_LDAP_MANAGE, FEDERATED_LDAP_VIEW, FEDERATED_SESSIONS_MANAGE, FEDERATED_SESSIONS_VIEW, GLOBAL_ADMINISTRATOR, GLOBAL_ADMINISTRATOR_VIEW, GLOBAL_ADMIN_UI_INTERACTIVE, GLOBAL_ADMIN_SDK_INTERACTIVE, GLOBAL_MACHINE_REGISTER, GLOBAL_ROLE_PERMISSION_MANAGEMENT, GLOBAL_ROLE_MANAGEMENT, GLOBAL_ROLE_VIEW, GLOBAL_PERMISSION_VIEW, GLOBAL_PERMISSION_MANAGEMENT, GLOBAL_CONFIG_VIEW, GLOBAL_CONFIG_MANAGEMENT, FOLDER_MANAGEMENT, FOLDER_VIEW, POOL_VIEW, POOL_MANAGEMENT, POOL_ENABLE, POOL_ENTITLE, POOL_SVI_IMAGE_MANAGEMENT, MACHINE_VIEW, MACHINE_MANAGEMENT, MACHINE_REBOOT, MACHINE_MANAGE_VDI_SESSION, MACHINE_MANAGE_OFFLINE_SESSION, MACHINE_USER_MANAGEMENT, MACHINE_MAINTENANCE, MANAGE_REMOTE_PROCESS, REMOTE_ASSISTANCE, GLOBAL_CVP_REGISTER, GLOBAL_CVP_PUBLICATION, CVP_INTERACTIVE, CVP_VIEW, CVP_MANAGEMENT, CVP_OWNERSHIP, API_SMART_CARD_BYPASS, UDD_VIEW, UDD_MANAGEMENT, HORIZON_CLOUD_SERVICE, SUBSCRIPTION_LICENSE_ADD, CLOUD_ADMIN, UNKNOWN_PRIVILEGE,

array of string

sub_privileges

Optional

List of sub-privileges.