If you are a Workspace ONE Access super administrator or an administrator who is assigned a role with the Role Administrator service, you can assign administrator roles to users and groups to grant them access to manage the actions and resources configured in the role.

Prerequisites

  • To assign users who are synced from the Workspace ONE UEM directory to admin roles in Workspace ONE Access, the user profile in the Workspace ONE UEM console must be configured with an Admin User Promote account.

    When users with the Admin User Promote account are synced to the Workspace ONE Access service, they are recognized as administrators and can be assigned an admin role in Workspace ONE Access. If the Admin User Promote account is removed from the user profile in the Workspace ONE UEM console, when the Workspace ONE UEM directory syncs with the Workspace ONE Access directory, the admin role is removed from the user profile inWorkspace ONE Access.

Procedure

  1. In the Workspace ONE Access console Accounts > Roles page, select the role and click ASSIGN.
  2. Enter a name in the search box and select the user or group.
    Only groups with fewer than 500 users in the group can be promoted to an administrator role.
  3. Click SAVE.
    The users or groups become administrators for the role. The user profile page is updated to show the role.
    Note: You can also assign roles to users when you add or edit a user profile. See Managing User Information in Workspace ONE Access.