Configure recording viewing policies

Session Recording supports role-based access control. You can create recording viewing policies in the Session Recording policy console and add multiple rules to each policy. Each rule determines which user or group can view recordings that originate from other users and groups, published applications and desktops, and delivery groups and VDAs you specify.

Create a custom recording viewing policy

Before you can create recording viewing policies, enable the feature as follows:

1. Log on to the machine hosting the Session Recording server.
2. From the Start menu, choose Session Recording Server Properties.
3. In Session Recording Server Properties, click the RBAC tab.

4. Select the Allow to configure recording viewing policies check box.

   

To create a custom recording viewing policy:

Note: Different from recording policies and event detection policies, a recording viewing policy (including all rules added within) is active immediately when it is created. You do not have to activate it.

1. Log on as an authorized Policy Administrator to the server where the Session Recording policy console is installed.

2. Start the Session Recording policy console. By default, there is no recording viewing policy.

   

   Note: To make Recording Viewing Policies available, enable the feature in Session Recording Server Properties first.

3. Select Recording Viewing Policies in the left pane. From the menu bar, choose Add New Policy to create a recording viewing policy.

4. (Optional) Right-click the new policy and rename it.

5. Right-click the new policy and select Add rule.

   

6. Click Add.

7. In the Select Users or Groups dialog, select a user or user group as the recording viewer.

   Note:

   A viewer must be assigned the Player role to view recorded sessions. For more information, see Authorize users.

   

   Note:

   In each rule, you can select only one user or user group as the recording viewer. If you select multiple users or user groups, only your most recent selection takes effect and appears in the text box.
   When you specify a recording viewer, ensure that you have assigned the viewer to the Player role. A user without the permission to play recorded sessions receives an error message when trying to play a recorded session. For more information, see Authorize users.

8. Click OK and then Next. The dialog for setting rule criteria appears.

9. Select and edit the rule criteria to specify whose recordings are visible to the viewer you specified earlier:
   • Users or Groups
   • Published Applications or Desktop
   • Delivery Groups or Machines

   

   Note:

   For recording viewing policies, the “OR” logical operator is used both between items within a rule criterion and between separate rule criteria.

   If you leave the rule criteria unspecified, the viewer specified earlier has no recordings to view.

10. Follow the wizard to complete the configuration.

    For example: