A Workspace ONE Access super administrator or a role that includes the role administrator service and the users and groups service can assign a role to users and groups to elevate them to administrators of that role.
Prerequisites
- Before adding an administrator role to a user who is synced from the Workspace ONE UEM directory, make sure that the user profile is configured with an Admin User Promote account in the Workspace ONE UEM console.
When users with the Admin User Promote account sync to Workspace ONE Access, they are recognized as administrators and can be assigned a role in Workspace ONE Access. If an admin is not in this account in the UEM console, when the Workspace ONE UEM directory syncs with the Workspace ONE Access directory, the admin role is removed from the user profile.