Providing users with access to resources in AppsAnywhere is done by including them in a provision. In this article, we'll walk through everything you need to know about creating a provision.

In this article

Also in this section

There are no sub-sections to this page


 

Overview

You will need to create a provision in AppsAnywhere to allow your users with access to the resources you have created. There are two core parts to a provision:

  1. The directory entity you wish to provide access to 
  2. The resources to which they will have access

You can define multiple directory entries and multiple resources in the same provision if you want and there are more settings available to help you define exactly how that access works, but we'll go through all of that in detail in this article. 

Choosing a Strategy

Often the hardest part about setting up provisions is deciding on a strategy on how you will structure and manage everything in AppsAnywhere.

There are certainly a lot of options you could choose, here are a few suggestions:

  • Create a provision for each resource and link it to every directory record (user/group/machine etc) that you want to be able to access it
  • Create a provision for each resource and link it to a directory group made especially to represent access to that resource (allowing you to manage access through directory assignments, as opposed to changes in AppsAnywhere)
  • Create a provision for each group of users and link it to every application that they have access to
  • Employ a mixed strategy and group resources and directory records in a way that best represents the structure of your organization and how you operate

The last options is always the one we would recommend, but it does take a little more thought and planning! Here's an example:

  1. You create a provision named "Engineering Apps" which links three AD groups; "Engineering Students - Year 1", "Engineering Students - Year 2" and "Engineering Staff" to all the apps specific to Engineering (such as Autocad, MATLAB, etc).
  2. You create another provision named "Open Source Apps" which links a single AD group; "Domain Users" to all of your open source packages, as they will be available to everyone. 
  3. etc. etc.

Once you have decided on your strategy, you are ready to begin.  

Creating a Provision

  1. Log into AppsAnywhere as an admin user
  2. Click on Return to Admin to access the admin portal
  3. On the navigation menu at the top of the page, go to Provisioning > Manage Provisions
  4. Click on the Add button on the top right of the page

You will then see form for creating a new provision. The most important fields are the first four you will see; Applications, Desktops, Directory Records and Display Name:

Set up the provision by completing these four fields:

  1. Select all the applications that you want this provision to provide access to
  2. Select all the desktops that you want this provision to provide access to
  3. Select the directory records that you want to provide access to the selected applications and/or desktops
  4. Give you provision a name. This is purely for your benefit to remind you of what this provision represents

Useful Information

You don't have to choose applications AND desktops for your provision, you can choose any number of either, as long as you assign at least one resource (application or desktop) to the provision.

If all you need to do is provide someone with access to an application or desktop, then that's all there is to it, just hit the Save button button to save the provision. 

You will then be sent back to the Viewing Provisions page, where you should see your new provision and the following message: 

Restrictions

All provisions can have their own restrictions assigned to them to determine when they are applied. These work in conjunction with the restrictions applied to individual delivery methods. For more information on that, see the Provision vs DM Restrictions page. 

If you want to add restrictions to where/when a provision is used, then you can do so using the fields provided on the rest of the create provision form:

Form Field NameExplanationExpected ValueExample
Expiration DateAllows you to specify a date after which the provision is considered to be expired. What happens when this time is reached depends on the value of the Expiration Action field belowThe date after which you want the provision to expire2020-01-01
Expiration Action

Dictates what happens when the expiration date is reached. Options are:

  • Never Expire - Expiration date field is disabled and provision doesn't expire
  • Notify Only - Provision continues to operate but an e-mail is sent to the administrator to remind them the provision needs reviewing for some reason
  • Expire With Notice - The provision is no longer active and the administrator is notified that it has expired
  • Expire Without Notice - The provision is no longer active but no notice is sent to the administrator
The action that you want AppsAnywhere to take when the provision expiresExpire With Notice
Device OwnershipDictates on what kind of devices the provision will be made available. Choose the value that reflects the desired behavior for this provision

"Organisation-Owned", "User-Owned" or "All", depending on which devices you want the provision to apply on

User-Owned Only
On-DomainDictates whether the provision will be available when the user is accessing the system on a non-domain-joined device. Choose "Enforced" if you want the provision to only be active when the user is using a domain-joined deviceYou would usually set this to "Do Not Enforce"Do Not Enforce
On-SiteDictates whether the provision will be available when the user is accessing the system from off-site. Choose "Enforced" if you want the provision to only be active when the user is on-siteYou would usually set this to "Do Not Enforce"Do Not Enforce
VisibilityDictates whether the apps in this provision should be visible in AppsAnywhere. If you are only launching apps through advertised shortcuts then you may not want them to be accessible through the AppsAnywhere interface, in which case you can set the visibility for the apps in the provision to "None"In the vast majority of cases, this value should be left as "Full"Full

Something to note

All provision assignments are calculated at login, so in order to test any changes you have made to a provision, including new ones you have added, affected users will need to log out of AppsAnywhere and log back in. 




 

Some other articles you might find useful:

 

Written By: