Delegating Session Management Permissions

If your organization has multiple user groups, all sharing centralized Parallels RAS resources, you have the ability to delegate session management permissions to an administrator of a particular group. When you do, the administrator can see and manage Parallels RAS sessions only for users who belong to that group.

Here's how this functionality works:

1. A separate theme is created for each group. Session management permissions for the theme are delegated to a Custom administrator (a special type for this kind of management).
2. When a custom administrator logs in to the Parallels RAS Console, they are presented with a limited user interface displaying sessions that belong to the theme (or multiple themes) that the administrator is allowed to manage.

The rest of this section describes how to configure and use this functionality.

Create a theme and delegate session management permissions

If you don't have a theme for a user group, you need to create it. Follow the instructions provided earlier in this chapter . To delegate session management permissions, you specifically need to do the following:

1. When specifying Common Theme Settings , select the Limit access to this theme to members of these Active Directory groups option and add one or more groups.
2. After creating or configuring the theme, close the Theme Properties dialog, then right-click anywhere in the list and choose Delegate Permissions .
3. If you already have a custom administrator account that you would like to use, it will appear in the list. If you don't have an account, create one as follows:
   1. Click Tasks > Add .
   2. In the Account Properties dialog, click the [...] button next to Name and select an account.
   3. The Permissions field is read-only and set to Custom administrator (the type that must be used here).
   4. Populate the rest of the fields (email, mobile, etc.) as needed.
   5. Click OK .
4. Back in the Delegate Permission dialog, select the administrator and then select the Manage sessions option for the desired theme(s) in the lower pane.
5. Click OK .

Note that you can also create a Custom administrator and see permissions that they have on the Administrator / Accounts page. When creating an administrator, select Custom administrator in the Permissions drop-down list. To see permissions, double-click an administrator and then click Change Permissions . The dialog opens displaying permissions. For a Custom administrator, the dialog lists themes to which the administrator has session management rights

Manage sessions

Once the above is complete, the custom administrator can manage sessions that belong to the specified theme(s). To manage sessions:

1. Run the Parallels RAS Console and log in using the credentials of a custom administrator.
2. The right pane will contain sessions that belong to the members of the group(s) assigned to the theme.
3. To manage a session, select it, then click the Tasks drop-down menu and choose a desired option (Disconnect, Log off, Send message, etc.).

Settings audit

Any changes to administrator permissions are recorded in the settings audit. Possible actions are create, update, and delete. You can view the changes by going to Administration / Settings Audit or Farm / Themes / Settings Audit .

Using themes in Parallels Client for Windows

In order for a user to use a corresponding theme, the connection properties must be properly set. To do so:

1. In Parallels Client for Windows, right-click a connection and choose Connection Properties .
2. On the Connection tab page, the server name must be followed by the theme name after a forward slash, as in Server-name/Theme-name .

When the administrator views sessions in the RAS Console, a client using a theme can be identified by the theme name in the Theme column. At the time of this writing, this only works with Windows clients.