Assign administrator roles to a user

To let a user perform management tasks in your Google Admin console, give them one or more administrator roles. When a user with administrator roles signs in to their Google enterprise account, they arrive at the Admin console. Which tasks they can perform there depends on the privileges granted by their roles.

You can assign the Admin console's pre-built roles for performing common business functions or custom roles you create for your organization. Assign multiple roles to a user to grant all privileges in those roles.

Only a super administrator can assign administrator roles to a user.
Assign roles to one user
  1. Sign in to the Google Admin console.
  2. Find the user account.
  3. Click the user to open its information page.
  4. Scroll to the bottom of the page and click Show more.
  5. Click Admin roles and its privileges.
    The Admin roles page lists the user's current privileges, if any. To see combined privileges granted by all the user's roles, click Resolved Privileges.
  6. Click Assign more roles.
  7. Choose a role from the Roles drop-down list.
  8. (Optional) If the role includes user management permimssions, click the Admin rights on list to select the organizational unit the administrator should be able to manage. What is this?.
  9. Click Confirm assignment.

Click Assign more roles to assign additional roles to the user. Or to remove a role from the user, check the roles you want to remove and click the Unassign roles button.

Assign roles to several users
  1. Sign in to the Google Admin console.
  2. From the dashboard, click Admin Roles. Where is it?
  3. At the left of the Admin roles page, select the role you want to assign.

    This lists users who are currently assigned this role. To see the privileges that this role grants, click Privileges.

  4. Click Assign admins.
  5. Type the user's username.
    Just start typing a name and a list of matching users appears that you can choose from.
  6. (Optional) If the role includes user management permimssions, click the Admin rights on list and select the organizational unit the administrator should be able to manage. What is this?
  7. Click Confirm assignment.

Click Assign admins to assign the role to more users. Or to remove a role from the user, select the user and click the Unassign admins button.

Assign user management roles

When assigning a role that performs actions on users, you can allow the administrator to perform those actions on all users in your account, or only on users in specific organizational units. For example, you might grant an administrator privileges to add or remove users only in the Sales department.

  1. Follow steps above to assign a role to a user.
  2. Select a role that can perform any actions on Users.
  3. Click the Admin rights on list to display your organizational structure.

    The Admin rights on list is available only if the role includes at least one user management privilege. Otherwise, the field shows All Orgs.

  4. Select the organizational unit the administrator should be able to manage.

    The administrator will be able to perform user tasks associated with this role only on users in this organizational unit and any suborganizations. To grant the administrator privileges for your entire account, select the top-level organization. (If you haven't created an organizational structure, the top-level organization is the only one available.)

The Admin rights on restriction applies only to actions performed on the Users page. Any other privileges apply to your entire account.

The user typically gets their new privileges within a few minutes, but it can take up to 24 hours. When they sign in to their Google account, they'll arrive at the Admin console dashboard and see the controls associated with their privileges.

Next steps: Have each administrator Add recovery options to their administrator account.