Console administrators must manage custom user and admin roles when upgrading Workspace ONE UEM


Custom roles allow Workspace ONE UEM administrators to customize as many unique roles as required, and to tweak large or small changes across different users and administrators. Custom roles, however, must be manually maintained by the customer admin over time and updated with new features. Workspace ONE administrators must back up their custom roles periodically as they may be affected by console upgrades.

As VMware adds new features to products, new resources added to existing Default Roles. Custom roles are typically subsets of our Default Roles in which the console administrator  has selectively chosen to remove some resources or access. VMware refrains from making any changes to the custom roles in Workspace ONE environments as they are defined by console administrators. Customers who choose to use custom roles in their environments are responsible verification of custom role configurations after an upgrade to their environment.

Currently, Workspace ONE UEM does not offer the ability to bulk manage Custom Admin/User Roles. Each Custom Role must be exported from the console individually. A feature enhancement request has been logged in to manage Admin Role Set in bulk with API functionality. Customers may request updates for the feature enhancement by opening a support case and inquiring about PR-200616.

Note: Relevant documentation is being updated at this time.


Customer Impact

All Workspace ONE Administrators must export every Custom Role in their Organization Group prior to upgrading their Workspace ONE Environment.

How to export custom roles from the Workspace ONE UEM Console:

  1. In Workspace ONE UEM Console, navigate to Accounts > Administrators > Roles
  2. Select the check box next to the Custom Role and click Export
  3. Save this file to a local or network storage device
  4. If any custom roles are modified after a console upgrade, the CSV can be imported into the Workspace ONE UEM Console to restore expected functionality and access
Have more questions? Submit a request


Article is closed for comments.