The actions run in the context of the user starting the web browser.
If the user doesn't have admin rights on the target computer, the actions won't work.
Reply: This is understood, the question is, what if the user does have admin rights to all computers and is in the desktop admins group. I want that particular user (Junior Admin) to not be able to access all the actions available just a few of them. Can this be done?