Custom roles and privileges

Google allows admins to mix and match permissions to create custom roles

When the prebuilt administrator roles aren't sufficient for an organization's needs, admins can create custom roles instead. Custom roles can be a mix of both Admin privileges and privileges for Individual services.

Admin Privileges

Google Workspace has 8 Admin privileges that can be assigned to a user:

• Admin API - Allows the user to use the Google Workspace API perform actions for account/user management and updating settings.

• Domain Settings - Allows the user to update organization settings and time zone and modify/delete the account.

• Groups - Gives access to create and manage Groups and Group settings.

• Organizational Units - Update and manage the organization and its units

• Reports - Gain access to Reports and audit logs

• Security - Control security settings for users such as enforcing/disabling 2-step verification and resetting passwords and keys.

• Support - Allows the user to contact Google Workspace Support via phone, chat, or email.

• Users - Allows the User to create, modify, and delete users in the organization.

Services Privileges

Expand and click for specifics for each privilege

• Service Settings

• Alert Center

• App Maker

• AppSheet

• Calendar

• Chrome Management *

• Classroom

• Cloud Search *

• Contacts

• Data loss prevention (DLP) *

• Data regions

• Data Security

• Directory settings

• Directory Sync

• Drive and Docs

• Gmail

• Google Chat

• Google Cloud Print

• Google Meet

• Google Meet hardware *

• Google Vault *

• Google Workspace Marketplace

• Groups for Business

• Jamboard

• Jamboard Management *

• Looker Studio

• Managed Google Play (also listed as "Google Managed Play")

• Mobile Device Management

• Password Vault *

• Pinpoint

• Secure LDAP *

• Security Center *

• Shared device settings

• Sites

• Storage

• Trust rules

• Work Insights *

• YouTube