The administrative role assigned to a user, or a group of users, controls the ability to view and manage objects within a Citrix Provisioning implementation. All members within a group share administrative privileges within a farm. An administrator may have multiple roles if they belong to more than one group. Groups are managed at the farm level through the Console’s Farm Properties window.

The following roles exist within a Citrix Provisioning farm:

• Farm Administrator: Farm administrators can view and manage all objects within a farm. Farm administrators can also create sites and manage role memberships throughout the entire farm.
• Site Administrator: Site administrators have full management access to the all objects within a site. For example, a site administrator can manage Provisioning Servers, site properties, target devices, device collections, vDisks, vDisk pools, and local vDisk stores. A site administrator can also manage device administrator and device operator memberships.
• Device Administrator: Device administrators perform all device-collection management tasks on collections to which they have privileges. These tasks include viewing vDisk properties (read-only) and assigning or removing vDisks from a device. They also include booting or shutting down target devices, editing device properties, and sending messages to target devices within a device collection to which they have privileges.
• Device Operator: Device operators view target device properties (read-only), boot or shut down target devices, and send messages to target devices within a device collection to which they have privileges.