Jump to content
Welcome to our new Citrix community!
  • Hide Apps from Cloud Workspace URL by Setting ExcludedSmartAccessFilterEnabled to True for Delivery Group


    UddaveJajoo22Rnd.png by Uddave Jajoo, Indianapolis CUGC Leader

    With the migration to Citrix Cloud, there is necessity to hide certain applications from all the enterprise users for scenarios like Dedicated MFG Site workspace, Isolated Apps for Designated users. As Citrix Cloud provides the single management plane and single workspace cloud URL, it could become difficult to hide specific applications from the Delivery Group for specific users. Thus, the necessity for this post on how to hide apps in Citrix Cloud.

    If a user is connected to the Citrix Cloud workspace URL, by default that user would be able to access all the applications published from the DGs.

    Therefore, to prevent users from not accessing any specific apps from Delivery group, Citrix has enabled a feature on the backend infrastructure. This feature gets enabled/disabled by setting the value to “True “or “False” for parameter ExcludedSmartAccessFilterEnabled.

    Below are the set of instructions to enable and disable the parameter for specific Delivery groups dedicated for MFG or any isolated site:

    • Open PowerShell as administrator
    • Run the command Get-XDAuthentication to Authenticate to Citrix Cloud Console
    • Click Continue
    • Enter the required credentials to connect to the Citrix Cloud
    • Note the respective Delivery group corresponding to dedicated MFG Site that needs to be set as hidden from the workspace
    • Run the below command in following order
      • # Apply Filtering to this group
        • $FilteredDeliveryGroup = (Get-BrokerDesktopGroup -name “<DeliveryGroupName>”).Uid
        • $FilteredDeliveryGroup
    • #View BrokerAccessPolicyRules
      • Get-BrokerAccessPolicyRule -DesktopGroupUid $FilteredDeliveryGroup | Select Name,ExcludedSmartAccessFilterEnabled,ExcludedSmartAccessTags,IncludedSmartAccessTags | Format-Table -AutoSize
    • # Return desktop group to storefront but not workspace (these settings can’t be displayed by the DaaS admin UI)
      • Get-BrokerAccessPolicyRule -DesktopGroupUid $FilteredDeliveryGroup | Set-BrokerAccessPolicyRule –ExcludedSmartAccessFilterEnabled $true ExcludedSmartAccessTags “Citrix-Via-Workspace:True” -IncludedSmartAccessTags @()
    • Login to the workspace portal to verify the resources from the DG are not visible anymore.
    • To revert the changes execute below command
      • #Revert the change to make resources visible again
      • Get-BrokerAccessPolicyRule -DesktopGroupUid $FilteredDeliveryGroup | Set-BrokerAccessPolicyRule –ExcludedSmartAccessFilterEnabled $False -ExcludedSmartAccessTags @() -IncludedSmartAccessTags @()


    See more posts by Uddave Jajoo here.


    Not a member of CUGC? Join today and never miss out!

    User Feedback

    Recommended Comments

    Create an account or sign in to comment

    You need to be a member in order to leave a comment

    Create an account

    Sign up for a new account in our community. It's easy!

    Register a new account

    Sign in

    Already have an account? Sign in here.

    Sign In Now

  • Create New...