As VDI administrator, you do have the ability to manage the current permission profiles available to your users. By default, IDEA ships with multiple pre-configured Permission Profiles:
observer: Read/Only access to the session
admin: Full privileges on the session
collaborator: Can see screen + control mouse and keyboard
owner: Grant same permissions as the virtual desktop session owner
Visualize all permission profiles available to the users
Create a custom permission profile
Click "Create Permission Profile" button and fill out the form:
Profile ID: Unique profile ID (e.g: observer_profile)
Title: Friendly name (e.g: View Only Profile)
Description: Description of the profile
Then select what permission(s) you want to apply by using the toggle buttons
Create a new permission profile
Once done, click "Submit" button. The profile will then be available to use by the users (refer to Permissions management for more details)