Scenario: A Citrix Engineer implemented applications and desktops based on department (Accounts, Sales and Management) and operating systems (Windows 7 and Windows 8). The engineer created five…

The Machine Catalog Administrator role granted on the Windows 7 scope allows the administrator to create and manage machine catalogs for all Windows 7 machines regardless of department scope, so new Windows 7 machines can be created in any department scope.

The administrator has no role assigned to the Windows 8 scope, and the Help Desk Administrator role on the Accounts scope does not include the ability to create new machines.

The Help Desk Administrator role granted on the Accounts scope includes session management permissions, and because Windows 8 machines in the Accounts scope fall within that scope, the administrator can perform session management on them.

The Help Desk Administrator role on the Accounts scope allows session management for all machines in Accounts, not just Windows 7, so this choice is too restrictive.