Add more Manager who can enroll token for users

Actually you misconfigured yor policies!
Use “pi-manage policy …” to clean up. Use an account with root privileges.