Modify account privileges on an enrolled device using the following steps.
Head to Devices > Inventory
Select the company device you want to configure and click on View Details
Select the account you want to configure — click on the three dots and select Manage Privileges
Select the privilege you'd like to assign to your employee (Standard or Admin) and confirm by clicking Continue