What user roles exist in Google

View Google's prebuilt Admin Roles and the differences between them

Prebuilt Administrator Roles cover many common use cases and can be assigned immediately with no additional configuration. As these roles are created by Google, the specific privilieges in each cannot be modified.

Super Admins

Super Admins have full control of the organization. They can make any change to the organization including user management and creation.

Groups Admin

Groups Admins can manage Groups tasks. This includes creating/deleting new Groups and managing group members. They can also add security labels to a group.

Groups Admin roles have two sub roles as well. Groups Readers can see Groups information but can't change it. Groups Editors are identical to Groupds Admins except with no option to add a security label.

User Management Admin

User Management Admins can manage all user accounts except for Admins. This includes managing security settings, renaming users, and updating passwords.

Help Desk Admin

Help Desk Admins can reset passwords for non-admin users and view the organizational structure.

Services Admin

Services Admins can enable/disable services and change service settings for non-admin users.

Mobile Admin

Mobile Admins can provision and approve devices, manage mobile apps, and set device policies.

Storage Admin

Storage admins can view the organization's storage use as well as users and shared drives and set storage limits for non-admin users.

Google Voice Admin

Used exclusively for managing Google Voice settings.

Directory Sync Admin

Can set up and manage Directory Sync

Reseller Admin & Indirect Reseller Admin

These roles are used for Google Workspace authorized resellers for placing orders for Google Workspace Accounts.