Permissions Tab

Users and Groups

Option	Description
Users and groups list	The users and groups to whom permissions can be granted or revoked. Select an entry to view and edit its permissions.
Add / Remove	Adds or removes a user or group. Add opens the Find Users and Groups dialog (see Find Users and Groups Dialog Window below).

Settings

Option	Description
Manage Profiles	Enables Access Profile creation and management for the selected user or group. When enabled, an Add button becomes available in the Access Profiles tab of the Web Manager. For details, see Access Profiles.
Configuration	Grants the selected user or group access to the Configuration Manager.
Enable persistent login	Allows the browser to remember the user and log them in automatically for the interval set in the associated Days field. Note: This requires the user’s browser to allow persistent cookies and local storage for the Thinfinity Workspace URL. Browsers set to clear data on exit, or running in private/incognito mode, bypass this setting.
Members	In the context of the Local Thinfinity IdP, grants the selected user the right to manage users and groups. See the Members add-on for the corresponding UI.

Modules

Option	Description
Analytics	Grants the selected user or group access to the Analytics feature.
Audit Log	Grants access to the Audit Log feature, which tracks user logins, sessions, and connections.
Reporting	Grants the selected user or group access to the Reporting feature.
Monitoring	Grants access to the Monitoring add-on.
Cloud Manager	Enables the Cloud Manager feature for managing VMs and virtual desktops. Select a user from the list and check this option to grant them access to Cloud Manager.
Cloud Manager Rights	Becomes available when Cloud Manager is selected. Opens the per-area Cloud Manager rights dialog. For details, see Cloud Manager Rights below.

RDC

Option	Description
Expand Toolbar on Start	Determines whether the connection toolbar starts expanded or collapsed for the selected user.
Show File Transfer	Selected by default. Grants the selected user access to the File Transfer feature. For details, see How to transfer files using Drag and Drop in our online Knowledge Base.
Enable Send-Keys	Selected by default. Uncheck to remove the Send Keys option from the Thinfinity Workspace toolbar.
Can Share Session	Selected by default. Enables the Session sharing feature for the selected user. For details, see Session Sharing in our online Knowledge Base.
Can play saved sessions	Enables saved-session playback for the selected user or group, allowing access to recordings of user interactions with remote resources. The Recordings add-on becomes available in the Web Manager. For details, see Session Recording.
Own / Any	Available only when Can play saved sessions is selected. Choose whether the user can play any recorded session or only those they recorded themselves.

Saved sessions cleanup

Select Saved sessions cleanup to open the Saved sessions cleanup settings dialog and configure the recordings clean-up parameters. See Saved Sessions Cleanup Settings below.

Find Users and Groups Dialog Window

Selecting Add from the Users and Groups area displays the following dialog window.

The following parameters are available.

Option	Description
Username or group	Enter the name of the user or group you want to locate.
Location	The scope of the search: the list of Directory Services used in the current Thinfinity Workspace installation. By default, the search runs across all of them; deselect any you want to exclude.
User/Group	Shows the results of the search.

Cloud Manager Rights Button

Allows granting specific rights for the different areas of the Cloud Manager. Selecting this button displays the following dialog window.

By default, the selected user has full rights to all the Cloud Manager areas. Use the drop-down field to select each area of the Cloud Manager and customize its permissions.

Saved Sessions Cleanup Settings

Grants access to the parameters associated with the saved-session recordings clean-up.

The following parameters are available:

Option	Description
Auto clean saved sessions	Select this option to activate the automatic cleanup of the saved-session recordings database.
Start clean-up every day at	Set a start time for the clean-up process.
Preserve saved sessions from last …days	Set the number of days for which saved-session recordings are preserved.

Permissions Reference Table

The table below shows how the Manage Profiles and Configuration permissions granted in the Configuration Manager Permissions tab affect what the user sees in the Access Profiles section and the Access Profiles Configuration dialog.

Permissions granted in Permissions tab	Can see “Configuration” icon in Access Profiles table	Sections visible inside Access Profiles Configuration dialog	Detailed behavior
Manage Profiles only (no Configuration)	✅ Yes	✅ Private Profiles ❌ General	User opens the Access Profiles Configuration dialog but only sees the Private Profiles section.
Configuration only (no Manage Profiles)	✅ Yes	✅ General ❌ Private Profiles	Having Manage Profiles OR Configuration is enough to see the icon; with only Configuration they see only the General tab.
Manage Profiles + Configuration	✅ Yes	✅ General ✅ Private Profiles	Full access: both sections appear inside the Access Profiles Configuration dialog.
Neither Manage Profiles nor Configuration	❌ No	❌ None	The user cannot see the Configuration icon in the Access Profiles section and cannot access any section.