You are here: Learn about Citrix App Layering [UnideskVersion Layering 4.0.8] > Set up > Set up Unidesk > Assign Unidesk Roles to users

Assign Unidesk Roles to users

In this article:

Unidesk Roles defined

Assign Unidesk Roles to users

Next step

About Unidesk users, roles, and rights

Built-in Administrator account

When you first install the Unidesk ELM (appliance) and log onto the Unidesk Management Console (UMC), there is a "built-in" Administrator account that you can use to get started. This Administrator has the rights to perform all Unidesk operations. You can edit this user's properties, including the name, password, and contact info. Be sure to change the password for this built-in Administrator account as part of installing and configuring the Unidesk ELM.

AD User accounts

Other than the built-in Administrator account, all Unidesk users are actually AD users imported via one or more directory junctions. Once your directory junction(s) have been created, you can assign Unidesk Roles to each user, as described later in this topic. You can see which roles are assigned to a user in the User Details.

Unidesk Roles defined

Unidesk Roles determine which Unidesk modules a user can manage. Users assigned one or more Unidesk Roles can log into the UMC, and these users are listed on the Administrators tab (select Users > Administrators).

Note: When upgrading from Unidesk 4.0.6 or earlier, users assigned the Machine Administrator Role in earlier releases will now be assigned the Read Only Role. If the user needs more than read only access, reconfigure the user roles, as needed.

Rights by Role

Role Rights

Administrator
  • Can do every operation available in the UMC.
  • Only users assigned the Administrator Role can edit user properties on the Users tab (Select Users > Users).
  • Only administrators can configure ELM system settings. and manage licenses.

Manage App Layers
  • Can create, edit, and delete application layers and versions.

Manage Elastic Layer Assignments
  • Can add, update, and remove Elastic layer assignments.

Manage Image Templates
  • Can create, edit and delete Image templates.
  • Can add, update, and remove app layer assignments for image templates.
  • Can update platform layer assignments for image templates.
  • Can update OS layer assignments for image templates.

Manage OS Layers
  • Can create, edit, and delete OS layers and versions.

Manage Platform Layers
  • Can create, edit, and delete Platform layers and versions.

Publish Layered Images
  • Can publish layered images.
  • Cannot create or modify existing image templates.

Read Only

  • Can view information about any items in the UMC.
  • Cannot launch any wizards or make any changes.
  • The Read Only user cannot cancel any tasks.

User credentials for logging into the UMC

When you assign Unidesk Roles to Directory Service users, they can use their Directory Service credentials to log into the UMC.

Who can assign Unidesk Roles?

You can change a user's role if you are logged into the UMC as a user assigned the Administrator Role.

Assign Unidesk Roles to users

  1. Log into the UMC.
  2. Select Users > Users.
  3. Select a user and click Edit Properties. This opens the Edit User wizard.

  4. Skip to the Roles tab, and select one or more roles for this user. For details, see Rights by Role above.

  5. In the Confirm and Complete tab, click Update User. Any comments you enter will appear in the Information view Audit History.

Next step

Create Layers