Assign administrator roles to a user

Let users perform management tasks in your Google Admin console by giving them one or more administrator roles. When a user with an admin role signs in to their Google account, they see the Admin console.

Types of roles you can assign

Assign pre-built roles for performing common business tasks. Or assign custom roles you create for your organization. Assign more than one role to a user to grant all the privileges in those roles.

Access to Admin console is limited by role

In the Admin console, admins can view only the information and perform only the tasks that the privileges associated with their roles allow. For example, say you assign the pre-built User Management role to someone. Then they can see and modify only specific profile and other settings for users who aren’t admins. To see what each privilege allows an admin to do, see Administrator privilege definitions.

Assign roles to users

You must be signed in as a super administrator for this task.

Assign roles to one user
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Users.
  3. In the Users list, find the user. If you need help, see Find a user account.
  4. Click the user’s name to open their account page.
  5. Click Admin roles and privileges.


    Points out Administrative roles link

  6. Take one of the following actions:
    • Assign a pre-built role or a custom role that was previously created by clicking the slider On for the role.

      If you don’t see the sliders, click anywhere under Roles to display them:

      Where to edit administrative roles

      Tip: You can search for a role by entering the first few characters of its name in the Search by role name box.

    • Create a new role for the user by clicking Create Custom Role.

      For details, see Create custom administrator roles.

  7. (Optional) To select which units you want the role to apply to, under Scope of role, click All organizational units.

    Note: This option is available only If you assigned a custom role for which you can restrict user management permissions to organizational units.

  8. Click Save.

    Tip: In the Privileges section below, you can see all the user's privileges from all admin roles they’re assigned to.

  9. (Optional) To return to the user’s account page, at the top right, click the Up arrow Up arrow .

 

Assign roles to several users
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Admin roles.

    To see Admin roles, you might have to click More controls at the bottom. 

  3. At the left, select the role you want to assign.

    This lists users that are currently assigned this role.

  4. (Optional) To see this role's privileges, click Privileges.
  5. Click Assign admins.
  6. Type the username.

    Tip: Start typing and select from the list of matching users.

  7. Click Assign more to assign this role to more users.
  8. (Optional) To select which organizational units you want the role to apply to, click the Admin rights on list. Then select the organizations you want administrator to manage. What is this?

    Note: This option is available only If you assigned a custom role for which you can restrict user management permissions to organizational units.

  9. Click Confirm assignment.
Assign user management roles

When assigning a custom role that performs actions on users, you can let the administrator perform those actions only on users in specific organizational units. For example, you might let the administrator add or remove users only in the Sales department. 

To limit user management privileges to one or more organizational units:

  1. Follow the steps above to assign a role to a user.
  2. Select a custom role that can perform any actions on users.
  3. Click Assign admins.
  4. Click the Admin rights on list to show your organizational tree.

    The Admin rights on list is available only if the role includes at least one user management privilege. Otherwise, the field shows All Orgs.

  5. Select the organization you want the administrator to manage.

    The administrator can also manage sub-organizations that inherit this setting.

  6. Click Confirm Assignment.

The user typically gets their new privileges within a few minutes. However, it can take up to 24 hours. When they sign in to their account, they arrive at the Admin console Home page. Here they see the controls allowed by their privileges.

Next steps: Have each administrator add recovery options to their account.

Was this article helpful?
How can we improve it?