Administrator account overview

Last updated June 17th, 2026

Administrator accounts are used by IT admins to manage devices and users in an organization. Before you can start configuring and monitoring devices, groups, and other items, you need to invite at least one admin to the Knox Manage console. You can invite an admin through the Knox Admin Portal, then set their role in the Knox Manage console.

Once you invite an admin from the Knox Admin Portal, you can go to the Knox Manage console to set their permissions, specify profiles and organizations for them to manage, and activate technical support admin access for devices.

  • Admin permissions are handled differently between the original and new consoles. For example, if you give an admin permission to manage users in the original console, that permission isn’t automatically carried over if you switch your tenant to the new console. Instead, you must configure different permissions to give the sub-admin access to manage users in the new console. See Add and modify admins to learn more about setting admin permissions in the new console.

  • If a Knox Manage admin doesn’t also have a Samsung account, they are not displayed on the Knox Admin Portal’s Administrators & Roles page.

Admins in Knox Manage are categorized by the following roles:

Admin role Description
Super
  • Modify and delete admin accounts.
  • Grant sub-admin administration rights.
  • Select profiles to manage for sub-admins.
  • Select organizations to manage for sub-admins.
Sub
  • Manage the profiles designated by a super admin or the profiles they created.
  • Depending on the Organization permission, manage or view the organizations designated by a super admin or the organizations they created.
Read Only Only view all menus, including menus for admins, in the Knox Admin Portal.
Service Admin (read only) Sends device commands. You can allow all device commands or select specific device commands for service admin use.

Additionally, the menus that admins can access vary depending on their role. For more information, see Menu access permissions.

Is this page helpful?