Allow Managers to Shadow Users in Citrix

I want to allow my site managers permission to use the SHADOW feature of Citrix so they can assist users. I have assigned permissions via “Citrix Configuration Configuration” to query, shadow, logon and connect with User Access. Whenever they launch the published application to begin shadowing they get a message they cannot log on to the citrix server. What step am I missing ?