Friday, 10 June 2016

Citrix XenDesktop administrator report missing information

We've just been testing our XenDesktop documentation script against the latest release of XenDesktop, XenDesktop 7.9 and noticed that we need to resolve the latest administrator rights to their human-readable strings, for example "AppDisk_AddScope" becomes "Add AppDisk to Scope".

To do this we generated a report of the permissions assigned to a user and were a little worried that these reports don't contain all of the information about the permissions assigned to a user.

For example we added some of the new AppDisk permissions to a role and assigned a user to that role.


Then generated a report for that user


It appears that the permission report isn't aware of the new permissions (AppDNA is there however the AppDisk settings are not seen). A little worrying from a security perspective.














No comments:

Post a Comment