Give a user administrator privileges

Grant administrator privileges

You can assign an administrator role to a user either on the user's account information page or on the Admin roles page where you define the administrator roles. On the Admin roles page you can assign a role to multiple users at the same time.

When you assign a role that grants privileges to actions on the Users page, you can restrict those privileges to apply only to particular organizational units. When you do that, the administrator can perform the actions only for the selected organizational unit (including its suborganizations) and its users. For example, you can grant an administrator privileges to add or remove users only in the Sales organization.

To assign an administrator role to a user:

  1. Sign in to the Google Admin console

  2. Find the user account. You can either search or browse:

    • Search: Enter the user name in the search box at the top of the Google Admin console, then click Search accounts.
    • Browse: Click Users and select an organization from the organizational structure.
      In the new Admin console, click filter to see organizational units and filter criteria.

  3. Click the row for the user account to display the user information page.

  4. Click Roles & Privileges.

    The Admin console shows the user's administrator privileges. If the user has no administrator roles assigned, he or she has no administrator privileges; if the user has one or more roles assigned, the combined privileges granted by those roles appear in a non-editable form in the Resolved Privileges section.

  5. Click Assign more roles.

  6. Choose the administrator role to assign from the Roles drop-down list.

    If the role you want to assign does not appear in the list, click Cancel to close the dialog box, then click Create new roles to create a new administrator role.

  7. For a role that includes privileges from the Users page, click the Admin rights on drop-down list and select the organization unit for which the administrator has privileges.

    To grant the administrator privileges for your entire organization, select the top-level organizational unit. If you haven't created an organizational structure, the top-level organization is the only one that appears. If the selected role doesn't include privileges from the Users page, the Admin rights on field shows All Orgs.

    The Admin rights to restriction applies only to privileges on the Users page. Any other privileges apply to the organization as a whole. In the Resolved Privileges section, the scope of the administrator's privileges appears when you hover the mouse over any of the User privileges.

  8. Click Confirm assignment.

    The user will generally have the new privileges within a few minutes, but in some cases it may take up to 24 hours.

  9. To assign an additional administrator role to this user, or the same role with privileges to another organizational unit, repeat steps 5 through 8.

  10. To remove administrator roles from this user, click the check box next to the names of the roles and click the Unassign roles button.

To assign an administrator role to multiple users at once:

  1. Sign in to the Google Admin console

  2. Do one of the following:  

    This page lists the available administrator roles and enables you to define additional roles.

  3. Select the administrator role you want to assign from the list in the left column.

    A list displays the users who already have this role assigned to them. To see the privileges that this role grants, click Privileges.

  4. Click Assign admins.

  5. Enter the user name of a user to whom you want to assign the role.

    As you start typing in the Administrators text box, a drop-down list of matching user names appears once you reach three letters. You can select the user name from the list.

  6. To assign the role to additional users, click Assign more and choose another user.

  7. For a role that includes rights from the Users page, click the Admin rights on drop-down list and select the organization unit for which the administrators will have rights.

    To grant the administrators rights for your entire organization, select the top-level organizational unit. If you haven't created an organizational structure, the top-level organization is the only one that appears. If the selected role doesn't include rights from the Users page, the Admin rights on field shows All Orgs.

    The Admin rights to restriction applies only to rights on the Users page. Any other rights apply to the organization as a whole.

    In the new Admin console, click filter to see organizational units and filter criteria.

  8. Click Confirm assignment.

    The user will generally have the new privileges within a few minutes, but in some cases it may take up to 24 hours.