This message was deleted.

Ah found it 2203... https://support.citrix.com/article/CTX461249/ddc2203-connection-failure-at-launch-after-ddc-upgrade-2203

usually that perm includes auth users i believe, so if you change it, which companies do, you need to make sure you explicitly include the delivery controllers

yeah, we're locked down. you're right by default it includes all auth'd users