Option A

Designate someone within your IT department to serve as both the Org Security Admin (manages
password settings, SAML, and access restrictions), the Org Workspace Admin (manages the workspaces and their settings), and the Org User Admin (adds new users and removes obsolete users).

Option B

Designate someone within your IT department to serve as the Org Security Admin, but grant one person from each solution (usually the Workspace Admin) Organization User Admin rights. In this situation, there would be one Org Security Admin, and multiple Org User Admins/Org Workspace Admins. This would allow each team to onboard new users as needed, without working with IT.

Option C

If IT involvement isn’t possible, have one person—maybe the Workspace Owner—from each team or solution area take on both the Org Workspace Admin and Org User Admin roles. This would mean there are multiple Org Workspace and User Admins, and each person can add people to the organization if needed.