Assign Roles to Active Directory Groups for Workspace ONE Access

Workspace ONE Access
uses role-based access control to manage delegation of roles. You assign the
Super Admin
,
Directory Admin
and
ReadOnly
roles to Active Directory groups to manage access to
Workspace ONE Access
.
You assign the following administrator roles to the corresponding user groups.
Workspace ONE Access Role
Example Active Directory Group Name
Super Admin
wsa-admins
Directory Admin
wsa-directory-admin
ReadOnly Admin
wsa-read-only
  1. In a web browser, log in to
    Workspace ONE Access
    by using the administration interface to the System Domain with
    configadmin
    user (https://
    <wsa_fqdn>
    /admin).
  2. On the main navigation bar, click
    Roles
    .
  3. Assign
    Workspace ONE Access
    roles to Active Directory groups.
    1. Select the
      Super Admin
      role and click
      Assign
      .
    2. In the
      Users / User Groups
      search box, enter the name of the Active Directory group you want to assign the role to, select the group, and click
      Save
      .
    3. Repeat this step to configure the
      Directory Admin
      and the
      ReadOnly Admin
      roles.