New Safeguard Security Officer - no workgroup option in domain drop-down


We have a new member of staff in our IT department. I recently set him as a Security Officer in SMC, so he has the same access rights as most other security officers (apart from me, as I am MSO).


However, when attempting to do a Bitlocker recovery for an end user, he doesn't have an option for workgroup clients in the drop-down - only domain.



This is what other SO's see though:



Does anyone know how to fix this?