# Custom roles and privileges

When the prebuilt administrator roles aren't sufficient for an organization's needs, admins can create custom roles instead. Custom roles can be a mix of both Admin privileges and privileges for Individual services. 

### Admin Privileges

Google Workspace has 8 Admin privileges that can be assigned to a user: 

* Admin API - Allows the user to use the Google Workspace API perform actions for account/user management and updating settings. 
* Domain Settings - Allows the user to update organization settings and time zone and modify/delete the account. 
* Groups - Gives access to create and manage Groups and Group settings.
* Organizational Units - Update and manage the organization and its units
* Reports - Gain access to Reports and audit logs
* Security - Control security settings for users such as enforcing/disabling 2-step verification and resetting passwords and keys. 
* Support - Allows the user to contact Google Workspace Support via phone, chat, or email. 
* Users - Allows the User to create, modify, and delete users in the organization. 

### Services Privileges 

<details>

<summary>Expand and click for specifics for each privilege</summary>

* [Service Settings](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#service_settings)
* [Alert Center](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#alertcenter)
* [App Maker](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#appmaker)
* [AppSheet](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#appsheet)
* [Calendar](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#calendar)
* [Chrome Management](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#chrome_ent) \*
* [Classroom](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#classroom)
* [Cloud Search](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#cloudsearch) \*
* [Contacts](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#contacts)
* [Data loss prevention (DLP)](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#DLP) \*
* [Data regions](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#data_regions)
* [Data Security](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#context_aware_access)
* [Directory settings](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#services_directory_settings)
* [Directory Sync](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#directory_sync)
* [Drive and Docs](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#drive_and_docs)
* [Gmail](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#gmail)
* [Google Chat](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#chat)
* [Google Cloud Prin](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#cloudprint)[t](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#data_studio)
* [Google Meet](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#meet)
* [Google Meet hardware](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#Meet_hardware) \*
* [Google Vault](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#vault) \*
* [Google Workspace Marketplace](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#gw_marketplace)
* [Groups for Business](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#groups_for_business)
* [Jamboard](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#jamboard_service)
* [Jamboard Management](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#jamboard) \*
* [Looker Studio](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#data_studio)
* [Managed Google Play](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#managedgoogleplay) (also listed as "*Google Managed Play*")
* [Mobile Device Management](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#mobiledevice)
* [Password Vault](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#passwordvault) \*
* [Pinpoint](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#pinpoint)
* [Secure LDAP](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#secureldap) \*
* [Security Center](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#securitycenter) \*
* [Shared device settings](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#shareddevice)
* [Sites](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#sites)
* [Storage](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#storage)
* [Trust rules](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#trust_rules)
* [Work Insights](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#workinsights) \*
* [YouTube](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#youtube)

</details>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.the-cloud-storage-guide.io/cloud-storage-platforms/google-workspace-overview/users-and-groups/user-roles-and-privleges/custom-roles-and-privileges.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.