> For the complete documentation index, see [llms.txt](https://docs.the-cloud-storage-guide.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.the-cloud-storage-guide.io/cloud-storage-platforms/google-workspace-overview/users-and-groups/user-roles-and-privleges/custom-roles-and-privileges.md). # Custom roles and privileges When the prebuilt administrator roles aren't sufficient for an organization's needs, admins can create custom roles instead. Custom roles can be a mix of both Admin privileges and privileges for Individual services. ### Admin Privileges Google Workspace has 8 Admin privileges that can be assigned to a user: * Admin API - Allows the user to use the Google Workspace API perform actions for account/user management and updating settings. * Domain Settings - Allows the user to update organization settings and time zone and modify/delete the account. * Groups - Gives access to create and manage Groups and Group settings. * Organizational Units - Update and manage the organization and its units * Reports - Gain access to Reports and audit logs * Security - Control security settings for users such as enforcing/disabling 2-step verification and resetting passwords and keys. * Support - Allows the user to contact Google Workspace Support via phone, chat, or email. * Users - Allows the User to create, modify, and delete users in the organization. ### Services Privileges
Expand and click for specifics for each privilege * [Service Settings](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#service_settings) * [Alert Center](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#alertcenter) * [App Maker](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#appmaker) * [AppSheet](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#appsheet) * [Calendar](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#calendar) * [Chrome Management](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#chrome_ent) \* * [Classroom](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#classroom) * [Cloud Search](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#cloudsearch) \* * [Contacts](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#contacts) * [Data loss prevention (DLP)](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#DLP) \* * [Data regions](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#data_regions) * [Data Security](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#context_aware_access) * [Directory settings](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#services_directory_settings) * [Directory Sync](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#directory_sync) * [Drive and Docs](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#drive_and_docs) * [Gmail](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#gmail) * [Google Chat](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#chat) * [Google Cloud Prin](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#cloudprint)[t](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#data_studio) * [Google Meet](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#meet) * [Google Meet hardware](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#Meet_hardware) \* * [Google Vault](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#vault) \* * [Google Workspace Marketplace](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#gw_marketplace) * [Groups for Business](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#groups_for_business) * [Jamboard](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#jamboard_service) * [Jamboard Management](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#jamboard) \* * [Looker Studio](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#data_studio) * [Managed Google Play](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#managedgoogleplay) (also listed as "*Google Managed Play*") * [Mobile Device Management](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#mobiledevice) * [Password Vault](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#passwordvault) \* * [Pinpoint](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#pinpoint) * [Secure LDAP](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#secureldap) \* * [Security Center](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#securitycenter) \* * [Shared device settings](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#shareddevice) * [Sites](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#sites) * [Storage](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#storage) * [Trust rules](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#trust_rules) * [Work Insights](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#workinsights) \* * [YouTube](https://support.google.com/a/answer/1219251?sjid=14916026050797143362-AP#youtube)