You can view detailed information about a user such as the user's entitled resources, group affiliations, and provisioned desktop systems and mobile devices.

Details to be reviewed include user attributes, including attributes that you configured in theVMware Identity Manager directory. The usefulness of viewing the additional directory attributes for an individual user depends on how you use such attributes in your deployment. You can use these additional attributes in the following ways:

To edit membership of a VMware Identity Manager group. For example, if you use the manager attribute in Active Directory, you can map the manager attribute to VMware Identity Manager. You can create a group where the group rules restrict membership to users with the manager attribute in their VMware Identity Manager user record.

To enable users to access Web applications with specific attribute requirements. For example, a financial application might restrict access to users with the employee ID attribute in their VMware Identity Manager user record.

1

In the administration console, select Users & Groups > Users.

The page displays a list of all users.

2

Click a user's name.

The user's details page is displayed. The user's name, email address, and role are listed along with the applications they are entitled to.

3

(Optional) To change the role, click User.

You can promote users to the administrator role, allowing them access the VMware Identity Manager administration console. Individuals assigned the administrator role can still access their app portal from the Web as a user. The URL to access the administration console is different than the URL to access the app portal.

Web Interface

Required Role

URL Example

administration

Administrator

https://mycompany.vmwareidentity.com/admin

My Apps portal

User

https://mycompany.vmwareidentity.com/web

4

(Optional) Click Show More to see attributes assigned to the user.

5

For more information about the user, you can select the following options.

Option

Description

Entitlements

The user's Entitlements page is displayed. In this page, you can:

View the list of resources entitled to the user.

Click Add entitlement to entitle the user to resources that are available in your catalog.

Click the name of a listed entitled resource to display that resource's Edit page. For resource types that have an Edit button, you can click the button to entitle or unentitle the user to resources or to customize the options for each entitled resource. From the Entitlements page, you can make the following changes:

For web applications, click Edit to change the user's entitlements to the web applications or the type of deployment for each of the user's entitled web applications. Select Automatic to have the web application displayed by default in the user portal. Select User-Activated to allow the user to add the web application to their My Apps area from the App Center collection of applications available.

For View desktop and application pools, you can view the user's existing entitlements to the View pools that are integrated with your VMware Identity Manager system. Entitlements to View desktop and application pools are configured in the View Connection Server instances that are integrated with your VMware Identity Manager system. You cannot change entitlements to View pools using the user's Entitlements page.

For ThinApp packages, click Edit to change the user's entitlements to the ThinApp packages or the type of deployment for the user's entitled ThinApp packages. Select Automatic to have the ThinApp package displayed by default in the My Apps area of the user portal. Select User-Activated to allow the user to manually add the ThinApp package from the App Catalog to the My Apps area.

For Citrix Published Applications, you can view the user's existing entitlements to the Citrix-based applications that are integrated with your VMware Identity Manager system. Entitlements to Citrix-based applications are configured in the Citrix deployments that are integrated with your VMware Identity Manager system. You cannot change entitlements to Citrix-based applications using the user's Entitlements page.

For resources types that have an Unentitle button, you can click the button to remove the user's access to use that resource.

Note

By default, for the table rows that have filled-in entries on this page, the Provisioning Status columns display Not Enabled, and you cannot change this value.

Group Affiliations

A list of the groups to which the user belongs is displayed. You can click a group's name to display the details page for that group.

Workspaces

The user's desktop workspaces page is displayed. In this page, you can view the desktops that have been provisioned, including the current status of the user's workspace.

For a desktop system, you can click Delete to remove the corresponding system from VMware Identity Manager. You might want to remove a system because the system is lost, stolen, or no longer in use.