Organization Administration

Managing Access

In the Administration menu, you can access an overview of users, groups, and account settings.

Here, you can add users to your organization and manage their permissions (roles).

Users

The following parameters can be configured:

Groups

In Groups, you can define groupings for users. This is intended for imported groups from an IdP.

Roles

Predefined roles are available under the Roles section. A role always includes a set of permissions for a user or group.

Sharing Instances

With users configured as vApp Users, access to individual vApps or VMs can be restricted.

Create a user to share the VM with, or ensure that the user already exists.

This procedure works similarly for sharing with a group or sharing a vApp.

Guest Customization

In the Administration section under Guest Customization, you can configure a global domain join for Windows VMs for the entire organization, removing the need to configure this individually for each VM.

Policies

As an organization administrator, you can configure policies and settings for the organization. These influence the behavior and capacity of the entire organization.

The following parameters can be adjusted:

• vApp Leases
  • Maximum Runtime Lease: Set the default expiration time (in hours or days) for a vApp before the expiration action is executed. By default, the setting is Never Expires.
  • Runtime Expiration Action: Define the action to take upon expiration, such as Suspend or Power Off. Note: Only running VMs incur compute costs.
  • Maximum Storage Lease: Set the expiration time for storage used by powered-off vApps (disks). Actions can include moving or permanently deleting storage. Default: Never Expires.
  • Clean Up Storage: Options include Move Storage or Delete.
• vApp Template Lease
  • Maximum Storage Lease: Default is Never Expires. You can define hours or days before the expiration action is executed.
  • Clean Up Storage: Options include Move Storage or Delete.
• Default Quotas
  • Quota for all VMs: Limit the number of VMs that can be created.
  • Quota for running VMs: Limit the number of running VMs.
• Password Policies
  • Account Lockout: Enable or disable account lockout to protect against unauthorized access attempts.
  • Invalid Login Attempts Before Lockout: Set the number of failed login attempts allowed before the user is locked out.
  • Lockout Interval: Define the duration of the lockout before the account is automatically unlocked.