Workspace ONE Access uses role-based access control to manage administrator roles. You assign the Directory Admin and ReadOnly roles to directory user groups to manage administrative access to the cross-region Workspace ONE Access cluster.

You assign the following administrator roles to the corresponding user groups.



Super Admin

Directory Admin

ReadOnly Admin


  1. In a Web browser, log in to the Workspace ONE Access cross-region cluster by using the administration interface.
    Setting Value
    User name configadmin
    Password cross-region_wsa_configadmin_password
    Domain System Domain
  2. On the main navigation bar, click Roles.
  3. Assign Workspace ONE Access roles to user groups.
    1. Select the Super Admin role and click Assign.
      The Assign role dialog box opens.
    2. In the Users / groups search box, enter, select the group, and click Save.
    3. Repeat this step to configure the Directory Admin and the ReadOnly Admin roles.