This article lists the user privileges required to successfully create and manage VMware vSphere machines through XenApp and XenDesktop.

Note: Create AppDisks and Delete AppDisks sections of this article are valid only for VMware vSphere minimum version 5.5 and XenApp and XenDesktop minimum version 7.8).

Instructions

Create a VMware user account and one or more VMware roles with a set or all of the privileges listed below. Base the roles' creation on the specific level of granularly required over the user’s permissions to request the various XenApp or XenDesktop operations at any time. To grant the user specific permissions at any point, associate them with the respective role, at the DataCenter level at a minimum.

The following tables show the mappings between XenApp and XenDesktop operations and the minimum required VMware privileges.

Add connection and resources

Provision machines (Machine Creation Services)

If you want the VMs you create to be tagged, add the following permissions for the user account:

To ensure that you use a clean base image for creating new VMs, tag VMs created with Machine Creation Services to exclude them from the list of VMs available to use as base images.

Provision machines (Provisioning Services)

All privileges from “Provision machines (Machine Creation Services)” and:

Power management

Image update and rollback

Delete provisioned machines

Create AppDisks (valid for VMware vSphere minimum version 5.5 and XenApp and XenDesktop minimum version 7.8)

Delete AppDisks (valid for VMware vSphere minimum version 5.5 and XenApp and XenDesktop minimum version 7.8)