Search
Clear search
Close search
Google apps
Main menu
true

Assign administrator roles to a user

Let users perform management tasks in your Google Admin console by giving them one or more administrator roles. When a user with an admin role signs in to their Google account, they see the Admin console.

Access to Admin console is limited by role

In the Admin console, admins can perform only the tasks their roles allow. For example, say you assign the User Management role to someone. Then they can see and modify only specific profile and other settings for users who aren’t admins.

Types of roles you can assign

Assign pre-built roles for performing common business tasks. Or assign custom roles you create for your organization. Assign more than one role to a user to grant all the privileges in those roles.

Assign roles to users

You must be signed in as a super administrator for this task.

Assign roles to one user
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console dashboard, go to Users.
  3. Find the user in the Users list.
  4. Click the user’s name to open their account page.
  5. Click Show more.
  6. Click Admin roles and privileges.


    Points out Administrative roles link

  7. Take one of the following actions:
    • Assign a pre-built role or a custom role that was previously created by clicking the slider On for the role.

      If you don’t see the sliders, click anywhere under Roles to display them:

      Where to edit administrative roles

    • Create a new role for the user by clicking Create Custom Role.

      For details, see Create custom administrator roles.

  8. (Optional) If you assigned a custom role for which you can restrict user management permissions to organizational units, select which units you want the role to apply to by clicking All organizational units under Scope of role
  9. Click Save.
    Tip: In the Privileges section below, you can see all the user's privileges from all admin roles they’re assigned to.
  10. (Optional) On the left, click User Summary to return to the user’s account page.

 

Assign roles to several users
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console dashboard, go to Admin roles.

    To see Admin roles, you might have to click More controls at the bottom. 

  3. At the left, select the role you want to assign.

    This lists users that are currently assigned this role.

  4. (Optional) Click Privileges to see this role's privileges.
  5. Click Assign admins.
  6. Type the username.

    Tip: Start typing and select from the list of matching users.

  7. Click Assign more to assign this role to more users.
  8. (Optional) If you assigned a custom role for which you can restrict user management permissions to organizational units, click the Admin rights on list. Then select the organizational units you want administrator to manage. What is this?
  9. Click Confirm assignment.
Assign user management roles

When assigning a custom role that performs actions on users, you can let the administrator perform those actions only on users in specific organizational units. For example, you might let the administrator add or remove users only in the Sales department. 

To limit user management privileges to one or more organizational units:

  1. Follow the steps above to assign a role to a user.
  2. Select a custom role that can perform any actions on users.
  3. Click Assign admins.
  4. Click the Admin rights on list to show your organizational tree.

    The Admin rights on list is available only if the role includes at least one user management privilege. Otherwise, the field shows All Orgs.

  5. Select the organization you want the administrator to manage.

    The administrator can also manage sub-organizations that inherit this setting.

  6. Click Confirm Assignment.

The user typically gets their new privileges within a few minutes. However, it can take up to 24 hours. When they sign in to their account, they arrive at the Admin console dashboard. Here they see the controls allowed by their privileges.

Next steps: Have each administrator add recovery options to their account.

Was this article helpful?
How can we improve it?
Sign in to your account

Get account-specific help by signing in with your G Suite account email address, or learn how to get started with G Suite.