As a tenant administrator, you can assign or remove the roles in your tenant.  As an encryption administrator, you can assign the Encryption Admin role. 

You can assign the workspace administrator role at the workspace level, rather than through the Administration console.

Only an encryption administrator can assign the Encryption Admin role. To assign your initial Encryption Admin role, see Get Started with BYOK.

To assign or remove roles:

  1. In the Administration console, navigate to Access Control > Assignments.
  2. Select the user to whom you want to assign, or remove from, a role.
  3. Select the checkboxes of the roles you want to assign and clear the checkboxes of the roles you want to remove.
  4. Click Save.
The Assignments tab in Access Control with one user selected. A panel displays at the bottom of the screen. The panel displays the user's tenant and a list of roles.