Citrix Systems 5.6 Benutzerhandbuch
9
A user's role can be changed in two ways:
1. Modify the subject -> role mapping (this requires the assign/modify role permission, only available to a
Pool Administrator.)
2. Modify the user's containing group membership in Active Directory.
Definitions of RBAC roles and permissions
The following table summarizes which permissions are available for each role. For details on the operations
available for each permission, see Definitions of permissions.
Table 1. Permissions available for each role
Role
permissions
Pool Admin Pool
Operator
VM Power
Admin
VM Admin
VM
Operator
Read Only
Assign/
modify roles
X
Log in to
(physical)
server
consoles
(through
SSH and
XenCenter)
X
Server
backup/
restore
X
Log out
active user
connections
X
X
Create and
dismiss
alerts
X
X
Cancel task
of any user
X
X
Pool
management
X
X
VM
advanced
operations
X
X
X
VM create/
destroy
operations
X
X
X
X