A Workspace ONE Access super administrator or a admin assigned the role that includes the Role Administrator service and the Users and Groups service can assign a role to users and groups to elevate them to administrators of that role.


  • Before adding an administrator role to a user who is synced from the Workspace ONE UEM directory, make sure that the user profile is configured with an Admin User Promote account in the Workspace ONE UEM console.

    When users with the Admin User Promote account are syncd to Workspace ONE Access, they are recognized as administrators and can be assigned a role in Workspace ONE Access. If a Workspace ONE UEM admin is not in the Admin User Promote account in the UEM console, when the Workspace ONE UEM directory syncs with the Workspace ONE Access directory, the admin role is removed from the user profile.


  1. In the Workspace ONE Access console Accounts > Roles page, select the role and click Assign.
  2. Enter a name in the search box and select the user or group.
    Only groups with fewer than 500 users in the group can be promoted to an administrator role.
  3. Click Save.
    The users or groups become administrators for the role. The user profile page is updated to show the role.
    Note: You can also assign roles to users when you add or edit a user profile. See Managing User Information in Workspace ONE Access.