Google Apps

Give a user administrator privileges

Administrator privilege details

A super administrator has complete access to the Google Admin panel and can perform all administrator actions. Super administrators also have full access to all users' calendars and calendar event details. Administrators with restricted access can perform all actions available on the Admin console screens they have rights to, and do not have special access to user calendars nor rights to use the Google Apps administrative APIs such as the Provisioning API. The table below provides details about which actions an administrator can perform when you grant him or her access to particular tabs.

All administrators have these rights:

  • The ability to view and edit other users' Google Sites
  • The ability to log into the Google Admin console
Organizations & user
  • The specific rights granted in the Organizations and User tables (more details)
  • Granting a user any of the User rights also gives him or her Read rights for User and Organizations
  • Users with the right to Create users can also perform remote wipes, change user names, add nicknames, and change passwords
  • Only super administrators can modify user settings for another administrator
Groups
  • Create, modify, and delete administrator-managed Google Groups
Domain settings
  • Set the administrator contact information for your Google Apps account
  • Add domains and domain aliases to your Google Apps account
  • Enable or disable contact sharing
  • Set user password requirements
  • Set up single sign-on
  • Control whether new features are added to your account automatically
  • Control the appearance of Google Apps by adding custom logos, setting colors, and choosing the default language
Advanced tools
  • View usage reports
  • Migrate email from legacy mail accounts
  • Restrict email delivery for users in specified organizational units

The ability to create multiple user accounts and control authentication is available only to super administrators.
Support
Administrators with access to the Support tab have full access to Google Apps Support and are entitled to request technical support for any issue, including tasks that they can't access in the Google Admin console.
Settings
  • Enable or disable core Google Apps services (Gmail, Calendar, Drive, user-managed Groups, Video, Sites, Contacts, and Mobile).
  • Configure the application settings for all core services. To give an administrator access to just the settings for email, Google Drive, mobile devices, or Chrome devices, do not select this check box but the specific ones for those settings pages.
Chrome

This option is automatically selected when you select the Settings option.
Email
  • View or edit settings related to mail options on the Email page.

This option is automatically selected when you select the Settings option.
Drive
  • View or edit settings related to Google Drive.

This option is automatically selected when you select the Settings option.
Mobile
  • Activate, delete, wipe, and otherwise manage mobile devices.

This option is automatically selected when you select the Settings option.
Provisioning API
  • The ability to use the Provisioning API to perform the actions selected using the check boxes in the Provisioning APIs section.

Related