Product Documentation

Managing Citrix Administrators

Oct 09, 2015

Citrix administrators are individuals tasked with managing server farms.

To create a Citrix administrator

You can make any member of a Windows or Novell Domain Services for Windows account authority a Citrix administrator.

  1. From the Start menu, select All Programs > Citrix > Management Consoles > Delivery Services Console.
  2. In the left pane, expand Citrix Resources > XenApp and select a farm.
  3. From the Actions pane on the right, click Add administrator.
  4. Click Add and select the configured user or user group account to designate as a Citrix administrator.
  5. On the Privileges page, select the authority level you want to grant the administrator account.
  6. If you are creating a custom administrator account, in the Tasks pane, select the tasks you want to delegate to the custom administrator.

To modify a Citrix administrator

  1. From the Start menu, select All Programs > Citrix > Management Consoles > Delivery Services Console.
  2. From the left pane, , expand Citrix Resources > XenApp and the farm, then choose the Administrators node.
  3. On the Administrators tab, select the administrator whose properties you want to change.
  4. On the Actions pane, click Administrator properties.
  5. Choose from the following options:
    • To change an administrator's privilege level, open the Privileges page
    • To assign or update custom permissions, open the Permissions page

To disable a Citrix administrator

Disable a Citrix administrator if you want to temporarily remove access for an administrator but retain the account and settings.

  1. Select the administrator whose privileges you want to disable.
  2. On the Actions pane, click Disable.
When an administrator is disabled, the administrator icon appears in grey and an Enable task becomes available.

To re-enable a Citrix administrator

  1. Select the administrator whose privileges you want to enable and then, on the Actions pane, click Enable.

To remove a Citrix administrator

Remove a Citrix administrator if you want to delete the account and settings. Only administrators with full access can disable or remove other Citrix administrator accounts.
Important: If only one Citrix administrator account with full access remains on the list, you cannot remove it.
  1. Select the administrator or administrators whose account you want to remove.
  2. On the Actions pane, click Delete administrator.

Delegating Tasks to Custom Administrators

You can delegate tasks through the Delivery Services Console by associating custom Citrix administrator accounts with permissions to perform select tasks.

Citrix recommends you create Windows, Active Directory, or NDS groups to assign these permissions. When you create custom Citrix administrators, simply select the group instead of individual users. This allows you to add and remove users to these groups without reconfiguring all of the permissions.

Permissions you set on nodes apply farm wide. Permissions you set on folders (applications, servers, and any folders within) apply only to the applications and servers contained within the selected folder.

You cannot grant permissions to applications and servers directly. To grant permissions to applications and servers, you must first place the applications or servers in folders and then grant permissions at the folder level. Therefore, before you delegate tasks for applications and servers, make sure you group the applications and servers in folders that allow you to delegate the tasks in a meaningful way.
Note: To apply the same permissions to a new folder as to its parent folder, select the Copy permissions from the parent folder option when you create the new folder.

To delegate tasks to existing custom administrators

  1. From the Start menu, select All Programs > Citrix > Management Consoles > Citrix Delivery Services Console.
  2. From the left pane, expand Citrix Resources > XenApp and the farm, then choose the Administrators node.
  3. On the Administrators tab, select the administrator to whom you want to delegate tasks.
  4. From the right pane, under Actions, click Administrator properties.
  5. In the Citrix Administrator Properties dialog box, on the Privileges pane, if Custom is not selected, select it.
  6. Click Permissions to view the task permissions assigned to the administrator.
  7. Click on a folder in the Folders list to view additional tasks.
  8. To select the tasks to which the administrator has access, select or clear the check boxes, as appropriate.
  9. If you set permissions on a node or a folder that contains a subfolder, the Copy to Subfolders button becomes active. Click this button if you want to copy the permissions from the parent node or folder to the constituent folder.
Note: If you change an administrator’s OBDA permissions, he or she must manually rerun discovery.

To assign folder permissions

To allow custom administrators to perform specific tasks in the farm, you assign object permissions at the farm level. To view and change permission on objects, such as printers, you must be a Citrix administrator with full access to view and change object permissions.

  1. From the Start menu, select All Programs > Citrix > Management Consoles > Citrix Delivery Services Console.
  2. From the left pane, select the folder under the farm to which you want to grant access.
  3. From the Actions pane, select Other Tasks, then Permissions. The resulting dialog box lists the administrators who currently have access to the selected folder.
  4. To give access to an administrator that is not on the Administrators list, click Add and then click the check box to allow access to the folder.

    If the administrator to whom you want to give access does not appear in the Add Access to folder dialog box, click Add to create the administrator.

To assign or change object permissions

To allow custom administrators to perform specific tasks in the farm, you assign object permissions at the farm level. To view and change permission on objects, such as printers, you must be a Citrix administrator with full access to view and change object permissions.

  1. From the Start menu, select All Programs > Citrix > Management Consoles > Citrix Delivery Services Console.
  2. From the left pane, select the farm to whose objects you want to grant access.
  3. From the right pane, under Actions, choose Other Tasks, then Set permission on objects.
  4. Select the object whose permissions you want to change and click Permissions.

    Under Administrators, you can see the administrators who have access to tasks related to the object.

  5. From the Administrators list select the administrator to whom you want to assign additional or change existing folder permissions. If the administrator you want is not on the list, click Add and select the administrator.

    If the administrator you want is not a custom administrator, click Edit and change the administrator's privilege level to Custom. This allows you to change the administrator's permissions.

  6. With the administrator selected, use the check boxes to change specific permissions in the Tasks pane.
If the folder contains subfolders, the following options become available:
  • Choose Copy the permissions of this administrator for this folder to its subfolders to copy newly configured permissions to all folders nested in the selected folder for the custom administrator.
  • Choose Copy the permissions of all administrators for this folder to its subfolders to copy the newly configured permissions of each custom administrator who has access to the selected folder to the folders nested within it.
    Note: If you change the permissions later in the top level folder, the changes are not automatically copied to the nested folders. When you make changes to top level folders, use either the Copy the permissions of this administrator for this folder to its subfolders or the Copy the permissions of all administrators for this folder to its subfolders function to copy the permissions again.