Hi James
Assigning to All Principals should work.
LiveCycle will also automatically create a "local" group called "All Principals in Domain X" whenever you create a new domain, and you could use that domain instead.
It's not that Adobe is discouraging the use of Workspace, it's more a general principal that the system should be secure by default. This is a very good principal to follow, otherwise you could easily get accidental or malicious misuse of the system. This basically means that nobody should automatically be allowed to do anything unless they have been explicitly granted authority. As the administrator of the system, you can choose to override the defaults using the "All Principals" group, but this is a decision you're explicitly making.
Adobe also appear to follow the principal of "Privacy by default" - for example, you can't see anyone else's task list unless they explicity grant you access.
Regards,
Howard
http://www.avoka.com