You can create different policy user levels with different permission sets that allow users to create and modify policies and policy assignments, and an administrator user to approve or reject policy changes.
You must have administrator rights to create users.
Open the User Management page: select Menu → User Management → Users.
Click New User.
Type a user name. For example,
policyUserorpolicyAdmin.Select Enable for the logon status of this account.
Select the authentication method for the new user.
ePO - On-prem authentication
Windows authentication
Certificate-based authentication
Note
The ePO - On-prem authentication password is for one-time use only and must be changed during the next logon.
Provide the required credentials or browse to select the certificate.
(Optional) Provide the user's full name, email address, phone number, and a description.
Select the policy user permission set you created, then click Save.
The new user or administrator appears in the Users list of the User Management page.
You have two policy users: a policy user who can change policies and policy assignments and a policy administrator who can approve or reject those changes.