https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/director/install-and-configure/advanced-configuration Anyone know if the users connecting to the Director console have to be in the same forest as Director?

We have some users connecting to director from our user domain, while our servers are in a different domain. We just created a group in the same domain as the users, and gave the desired access rights

Does the USER logged in to the director console need any sort of permissions on the end-user AD/VDA?

We haven't set any special rights in the users domain, only given the group access as helpdesk administrators so they can shadow users. That's only set in the domain the servers are memebers off