by Uddave Jajoo, Indianapolis CUGC Leader

With the migration to Citrix Cloud, there is necessity to hide certain applications from all the enterprise users for scenarios like Dedicated MFG Site workspace, Isolated Apps for Designated users. As Citrix Cloud provides the single management plane and single workspace cloud URL, it could become difficult to hide specific applications from the Delivery Group for specific users. Thus, the necessity for this post on how to hide apps in Citrix Cloud.

If a user is connected to the Citrix Cloud workspace URL, by default that user would be able to access all the applications published from the DGs.

Therefore, to prevent users from not accessing any specific apps from Delivery group, Citrix has enabled a feature on the backend infrastructure. This feature gets enabled/disabled by setting the value to “True “or “False” for parameter ExcludedSmartAccessFilterEnabled.

Below are the set of instructions to enable and disable the parameter for specific Delivery groups dedicated for MFG or any isolated site:

• Open PowerShell as administrator
• Run the command Get-XDAuthentication to Authenticate to Citrix Cloud Console

• Click Continue

• Enter the required credentials to connect to the Citrix Cloud

• Note the respective Delivery group corresponding to dedicated MFG Site that needs to be set as hidden from the workspace
• Run the below command in following order
  • # Apply Filtering to this group
    • $FilteredDeliveryGroup = (Get-BrokerDesktopGroup -name “<DeliveryGroupName>”).Uid
    • $FilteredDeliveryGroup

• #View BrokerAccessPolicyRules
  • Get-BrokerAccessPolicyRule -DesktopGroupUid $FilteredDeliveryGroup | Select Name,ExcludedSmartAccessFilterEnabled,ExcludedSmartAccessTags,IncludedSmartAccessTags | Format-Table -AutoSize

• # Return desktop group to storefront but not workspace (these settings can’t be displayed by the DaaS admin UI)
  • Get-BrokerAccessPolicyRule -DesktopGroupUid $FilteredDeliveryGroup | Set-BrokerAccessPolicyRule –ExcludedSmartAccessFilterEnabled $true –ExcludedSmartAccessTags “Citrix-Via-Workspace:True” -IncludedSmartAccessTags @()

• Login to the workspace portal to verify the resources from the DG are not visible anymore.
• To revert the changes execute below command
  • #Revert the change to make resources visible again
  • Get-BrokerAccessPolicyRule -DesktopGroupUid $FilteredDeliveryGroup | Set-BrokerAccessPolicyRule –ExcludedSmartAccessFilterEnabled $False -ExcludedSmartAccessTags @() -IncludedSmartAccessTags @()

See more posts by Uddave Jajoo here.

Not a member of CUGC? Join today and never miss out!