Based on my test,
- An admin of a workgroup is not be affected by RLS roles.
- A member of a workgroup is not be affected by RLS roles, if he is not in any RLS role, namely he is able to view all data when he is not in any role. When he is in some role, he can only view the filtered data.