There should be a property in Gateway Settings for Client Launcher Role(s) and if you don't have one of these roles you cannot open the Client Launcher. We can then give all our developers this role which they use on client machines to create desktop shortcuts for end users.