You can create administrator roles which define specific tasks that can be performed in Workspace ONE UEM. You then assign these roles to individual admins.


  1. Navigate to Accounts > Administrators > Roles and select Add Role in the UEM console.
    This screenshot features the Create Role screen with Categories on the left and searchable Content Management on the right.
  2. In the Create Role, enter the Name and Description of the role.
  3. Select from the list of Categories.
    The Categories section organizes top-level categories such as Device Management under which are located subcategories including Applications, Browser, and Bulk Management among others. This category subdivision enables an easy and quick role creation process. Each subcategory setting in the right panel has a Read and Edit check box.
    When you select from the Categories section, its subcategorized contents (individual settings) populate in the right panel. Each individual setting features its own Read and Edit check box and a "select all" style Read and Edit check box in the column heading. This arrangement allows for a flexible level of control and customization while creating roles.
    Use the Search Resources text box to narrow down the number of resources from which you can select. Resources are generally labeled the same way as they are referred to in the UEM console itself. For example, if you want to limit an admin role to editing App Logs, then enter "App Logs" in the Search Resources box and a listing of all resources that contain the string "App Logs" displays.
  4. Select the appropriate Read and Edit check box in the corresponding resource options. You can also choose to clear any of the selected resources.
    This screenshot shows how clicking on the orange pie graphs can let you choose an edit more for an entire category.
  5. To make blanket category selections, select None, Read, or Edit directly from the Categories section without ever populating the right panel. Select the circular icon to the right of the Category label, which is a drop-down menu. Use this selection method when you are certain you want to select none, read-only, or edit capabilities for the entire category setting.
  6. Select Save to finish creating the Custom Role. You can now view the added role in the list on the Roles page. From here, you can also edit the role details or delete the role.

What to do next

You must update the custom role after each Workspace ONE UEM version update to account for the new permissions in the latest release.