> For the complete documentation index, see [llms.txt](https://docs.the-cloud-storage-guide.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.the-cloud-storage-guide.io/cloud-storage-platforms/google-workspace-overview/users-and-groups/user-roles-and-privleges/custom-roles-and-privileges.md). # Custom roles and privileges Google allows admins to mix and match permissions to create custom roles When the prebuilt administrator roles aren't sufficient for an organization's needs, admins can create custom roles instead. Custom roles can be a mix of both Admin privileges and privileges for Individual services. ### Admin Privileges Google Workspace has 8 Admin privileges that can be assigned to a user: * Admin API - Allows the user to use the Google Workspace API perform actions for account/user management and updating settings. * Domain Settings - Allows the user to update organization settings and time zone and modify/delete the account. * Groups - Gives access to create and manage Groups and Group settings. * Organizational Units - Update and manage the organization and its units * Reports - Gain access to Reports and audit logs * Security - Control security settings for users such as enforcing/disabling 2-step verification and resetting passwords and keys. * Support - Allows the user to contact Google Workspace Support via phone, chat, or email. * Users - Allows the User to create, modify, and delete users in the organization. ### Services Privileges
Expand and click for specifics for each privilege * [Service Settings](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#service_settings) * [Alert Center](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#alertcenter) * [App Maker](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#appmaker) * [AppSheet](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#appsheet) * [Calendar](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#calendar) * [Chrome Management](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#chrome_ent) \* * [Classroom](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#classroom) * [Cloud Search](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#cloudsearch) \* * [Contacts](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#contacts) * [Data loss prevention (DLP)](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#DLP) \* * [Data regions](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#data_regions) * [Data Security](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#context_aware_access) * [Directory settings](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#services_directory_settings) * [Directory Sync](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#directory_sync) * [Drive and Docs](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#drive_and_docs) * [Gmail](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#gmail) * [Google Chat](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#chat) * [Google Cloud Prin](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#cloudprint)[t](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#data_studio) * [Google Meet](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#meet) * [Google Meet hardware](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#Meet_hardware) \* * [Google Vault](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#vault) \* * [Google Workspace Marketplace](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#gw_marketplace) * [Groups for Business](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#groups_for_business) * [Jamboard](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#jamboard_service) * [Jamboard Management](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#jamboard) \* * [Looker Studio](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#data_studio) * [Managed Google Play](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#managedgoogleplay) (also listed as "*Google Managed Play*") * [Mobile Device Management](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#mobiledevice) * [Password Vault](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#passwordvault) \* * [Pinpoint](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#pinpoint) * [Secure LDAP](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#secureldap) \* * [Security Center](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#securitycenter) \* * [Shared device settings](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#shareddevice) * [Sites](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#sites) * [Storage](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#storage) * [Trust rules](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#trust_rules) * [Work Insights](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#workinsights) \* * [YouTube](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#youtube)