Assign administrator roles to a user
Let users perform management tasks in your Google Admin console by giving them one or more administrator roles. When a user with an administrator role signs in to their Google account, they see the Admin console. There, they can perform any task allowed by their roles.
You must be signed in as a super administrator for this task.Assign roles to one user
- From the Admin console dashboard, go to Users.
- Click a user's name to open their account page.
- Scroll to the bottom and click Show more.
- Click Admin roles and privileges.
Tip: To see the privileges granted by the user's current roles, click View Privileges.
- Click Manage roles.
- Choose a role from the Roles list.
- (Optional) If the role includes user management permissions for organization units, select them from the No organizations selected list beneath each role. What is this?.
- Click Update roles.
Click Manage roles to assign more roles to the user.
From the Admin console dashboard, go to Admin roles.
To see Admin roles, you might have to click More controls at the bottom.
- At the left, select the role you want to assign.
This lists users that are currently assigned this role. To see the privileges that this role grants, click Privileges.
- Click Assign admins.
- Type the user's username.
Tip: Start typing a name. Then select from the list of matching users.
- Click Assign more to assign this role to more users.
- (Optional) If the role includes user management permissions that can be limited to organizational units, click the Admin rights on list. Then select the organizational units you want administrator to manage. What is this?
- Click Confirm assignment.
When assigning a role that performs actions on users, you can let the administrator perform those actions only on users in specific organizational units. For example, you might let the administrator add or remove users only in the Sales department.
To limit user management privileges to one or more organizational units:
- Follow the steps above to assign a role to a user.
- Select a role that can perform any actions on Users.
- Click Assign admins.
- Click the Admin rights on: list to show your organizational tree.
The Admin rights on: list is available only if the role includes at least one user management privilege. Otherwise, the field shows All Orgs.
- Select the organization you want the administrator to manage.
The administrator will also be able to manage sub-organizations that inherit this setting.
- Click Confirm Assignment.
Note: Access these settings in the Services Privilege.
|Manage Device Shipments||READ access to Shipments.
This setting can only be granted to control all users in your account. It can't be granted for controlling organizational units.
|Manage Devices||READ and WRITE access to Devices.|
|Manage User Settings||READ and WRITE access to User Settings and Application settings.|
|Manage Application Settings||READ and WRITE access to the Apps and Extensions section of User Settings.|
|Manage Device Settings||READ and WRITE access to Device Settings.|
|Manage User and Device Networks||READ and WRITE access to Networks.|
The user typically gets their new privileges within a few minutes. However, it can take up to 24 hours. When they sign in to their account, they arrive at the Admin console dashboard. Here they see the controls allowed by their privileges.
Next steps: Have each administrator add recovery options to their administrator account.