System and method for user authorization in a virtual desktop access device using authentication and authorization subsystems of a virtual desktop environment

A method, comprising:

• providing, by a directory service system of a virtual desktop system, a group list having a plurality of host groups, each host group including a list of authorized users and an associated set of host processing functions on a virtualization system for the authorized users within the particular host group;
• providing, on an access device of the virtual desktop system, a plurality of device processing functions, each device processing function being associated with a particular one of the host processing functions;
• providing, on the access device, privilege logic having a plurality of device groups, each device group being associated with a particular one of the host groups and including an associated set of the device processing functions, each set of device processing functions being associated with a set of host processing functions accessible to the associated host group;
• receiving, by the directory service system, a log on from a user of the access device;
• authenticating, by the directory service system, the user as being associated with a particular host group;
• sending, by the directory service system, an indication to the access device that the user is associated with the particular host group;
• determining a particular device group associated with the particular host group based upon the indication, and
• enabling, by the privilege logic, the access device to execute only a particular set of device processing functions associated with the particular device group on the virtualization system.

An access device for a virtual desktop system, the access device configured to provide a plurality of device processing functions, each device processing function being associated with a host processing function of a virtualization system of the virtual desktop system, the access device comprising:

• a processor;
• and
• a memory for storing code;
• wherein the processor is configured to:
• implement privilege logic having a plurality of device groups each device group being associated with a particular host group provided on a directory service of the virtual desktop system, each device group including an associated set of the device processing functions, each set of device processing functions being associated with a set of host processing functions accessible to the associated host group;
• log on to the directory service;
• receive an indication that a user associated with the log on to the directory service is associated with a particular host group;
• and
• enables the access device to execute only a particular set of device processing functions associated with the particular device group on the virtualization system.