During the initial startup, all the non-synced users will be synced with APM's least privilege. In this case, super admins can edit the user roles of users that have been synced with the least privilege from the user management page.
Once APM is up and running, non-synced users will be synced with the least privilege in APM. The users will be synced only if the APM checkin box is enabled. In this case, super admins can edit the user roles of users that have been synced with the least privilege from the user management page.
Users roles will be synced based on the configuration provided by the admin and will be synced to APM only if the check box in the user management page of OpManager is selected. The checkbox will be disabled by default and only if the checkbox is enabled, admins can view the APM access control options and applications tab.
Super admins can edit the user roles of existing users by navigating to the user management page under OpManager. A self-user cannot edit their own user role. If the user were an admin in both OpManager and APM, they can add or edit any other user roles.