Product documentation
Session Recording
Service Current Release 2402 LTSR 2311 2308 2305 2303 2212 2210 2209 2207 2206 2204 2203 LTSR 2201 1912 LTSR 7.15
View PDF

Authorize users

December 11, 2023
Contributed by: 
B C

To grant users the rights, you assign users to roles using the Session Recording Authorization Console on the Session Recording server. Five roles are available:

Important:

For security reasons, grant users only the rights they need to perform specific functions, such as viewing recorded sessions.

  • PolicyAdministrator. Grants the right to view, create, edit, delete, and enable recording policies. By default, administrators of the machine hosting the Session Recording server are members of this role.
  • PolicyQuery. Allows the servers hosting the Session Recording agent to request recording policy evaluations. By default, authenticated users are members of this role.
  • LoggingWriter. Grants the right to write the Administrator Logging logs. By default, local administrators and the Network Service group are members of this role. Changing the default LoggingWriter membership can cause log writing to fail.
  • LoggingReader. Grants the right to query the Administrator Logging logs. There is no default membership in this role.
  • PrivilegedPlayer. Grants the right to place and remove access restrictions on recordings and the right to archive and delete recordings.

  • Player. Grants the right to view recorded Citrix Virtual Apps and Desktops and Citrix DaaS (formerly Citrix Virtual Apps and Desktops service) sessions. There is no default membership in this role. When you install Session Recording, no user has the right to play recorded sessions. A user without the permission to play recorded sessions receives the following error message when trying to play a recorded session:

    Recording search failure

To assign users to a role, do the following:

  1. Log on as an administrator to the machine hosting the Session Recording server.
  2. Start the Session Recording Authorization Console.
  3. Select the role to which you want to assign users.
  4. From the menu bar, choose Action > Assign Users and Groups.
  5. Add the users and groups.

Session Recording supports users and groups defined in the Active Directory.

Any changes made to the console take effect during the update that occurs once every minute. Also, starting with the 1906 release, you can use the Session Recording policy console to create recording viewing policies. For more information, see Recording viewing policies.

Authorize users
December 11, 2023
Contributed by: 
B C
December 11, 2023
Contributed by: 
B C

In this article

Site feedback | Your privacy choices footer linkYour Privacy Choices | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.