Administrators should manage workspace identity, billing, team access, sender-domain ownership, integration authority, and any settings that affect the whole organization.
End users should not be expected to understand or change every global setting. A good admin layer keeps global controls centralized and user workflows simple.