The App Volumes vCenter service account (svc-appvolumes in the example provided) requires the following permissions to each of the Horizon vCenter Servers. These permissions may be granted using the same technique referenced in the Create a vCenter role and grant permissions section of Chapter 2, Implementing Horizon Connection Server:

• Datastore: Allocate space, Browse datastore, Low-level file operations, Remove file, and Update virtual machine files
• Global: Cancel task
• Host: Local operations—Reconfigure virtual machine
• Sessions: View and stop sessions
• Tasks: Create task
• Virtual machine – Configuration: Add existing disk, Add new disk, Add or remove device, Query unowned files, Change resource, Remove disk, Settings, and Advanced
• Inventory: Create new, Move, Register, Remove, and Unregister
• Provisioning: Promote disks