Which administrative role can manage catalogs and build virtual desktops?

The Machine administrator role is specifically scoped to manage machine catalogs, including creating, editing, and deleting them, as well as provisioning virtual desktops within those catalogs. This role has the necessary permissions to interact with hypervisor connections and Machine Creation Services or Provisioning Services to build desktop images. No other role combines both catalog management and desktop provisioning rights.

The Help desk administrator role is limited to session management tasks such as shadowing and logging off sessions, not catalog or desktop creation.

The Read-only administrator role grants view-only access to the Citrix site configuration and cannot perform any create, modify, or delete operations.

The Desktop group administrator role manages delivery groups and their assignment policies, but does not have permissions to build or manage machine catalogs.