How to Create and Manage Administrators in the Symantec Endpoint Protection Manager (SEPM) with separate admin rights.
You don’t want all administrators to have full control in SEPM
How to Create and Manage Administrators in the Symantec Endpoint Protection Manager (SEPM)
System administrators have full capabilities throughout the network they
administer. They are the equivalent of superusers. In a system with multiple
domains, a system administrator can administer any domain. System
administrators see only those administrators administering the domain they are
administrating.
Administrators have limited capabilities, specified by the administrators that
create them. An administrator can administer only the domain in which he was
created.
Limited administrator have very limited capabilities, specified by the System administrators and administrators, such as can Viewing Reports, Policies, updating content in a specific domain.
Note: If using multiple domains in SEPM - admins will need to specify what domain they are logging into when launching the SEPM console or authentication will fail.
References
Admin Guide.